Vulnerabilities

TI-2026-35210 CVE-2026-47707 · GHSA-fr49-mhgj-crfc

Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification

MEDIUM 63

Strawberry GraphQL is a library for creating GraphQL APIs.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00466 Published 2026-06-04 Fixed in 0.315.7 CWE-400

TI-2026-33476 CVE-2026-45739 · GHSA-x97m-qp5c-w9xj

LOW 19

Strawberry GraphQL is a library for creating GraphQL APIs.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00218 Published 2026-06-04 Fixed in 0.315.4 CWE-200

TI-2026-35209 CVE-2026-47706 · GHSA-qfwv-87qj-98xq

MEDIUM 63

Strawberry GraphQL is a library for creating GraphQL APIs.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00296 Published 2026-06-04 Fixed in 0.315.7 CWE-400

TI-2026-27639 CVE-2026-35523 · GHSA-vpwc-v33q-mq89

LOW 39

Strawberry GraphQL is a library for creating GraphQL APIs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0044 Published 2026-04-07 Fixed in 0.312.3 CWE-306

TI-2026-27641 CVE-2026-35526 · GHSA-hv3w-m4g2-5x77

LOW 39

Strawberry GraphQL is a library for creating GraphQL APIs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00285 Published 2026-04-07 Fixed in 0.312.3 CWE-770