How many CVEs does strawberry strawberry graphql have?

strawberry strawberry graphql has 5 published CVE records since 2026.

How many strawberry strawberry graphql CVEs are in CISA KEV?

None of strawberry strawberry graphql's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for strawberry strawberry graphql vulnerabilities?

Yes — 2 of strawberry strawberry graphql's CVEs have a known public exploit.

Which versions of strawberry strawberry graphql are affected?

7 distinct strawberry strawberry graphql versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in strawberry strawberry graphql CVEs?

strawberry strawberry graphql's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-201 (Insertion of Sensitive Information Into Sent Data), CWE-306 (Missing Authentication for Critical Function), CWE-770 (Allocation of Resources Without Limits or Throttling).

What is the average severity of strawberry strawberry graphql CVEs?

The average CVSS base score across strawberry strawberry graphql's scored CVEs is 6.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

strawberry

5 CVEs

strawberry graphql Vulnerabilities

Name: strawberry graphql vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for strawberry graphql by strawberry.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

6.0

Avg CVSS

2026–2026

Last updated June 4, 2026

Overview

strawberry graphql has 5 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting strawberry graphql, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of strawberry graphql's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of strawberry graphql's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of strawberry graphql's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every strawberry graphql version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.312.32 CVEs
0.172.0 <= v < 0.315.71 CVE
0.288.4 <= v < 0.315.41 CVE
0.71.0 <= v < 0.315.71 CVE

Fixed in

0.312.32 CVEs
0.315.72 CVEs
0.315.41 CVE

Find a version

5 CVEs

Sort

Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification
CVE-2026-47707
Public exploit
Patch
CWE-400
Medium · CVSS 5.3
EPSS 0.4% (34th pct)2026-06-04
Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs
CVE-2026-45739
Patch
CWE-201
Medium · CVSS 4.3
EPSS 0.2% (12th pct)2026-06-04
Strawberry GraphQL has a Circular Fragment Reference DOS
CVE-2026-47706
Public exploit
Patch
CWE-400
Medium · CVSS 5.3
EPSS 0.3% (22th pct)2026-06-04
Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocol
CVE-2026-35523
Patch
CWE-306
High · CVSS 7.5
EPSS 0.4% (35th pct)2026-04-07
Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions
CVE-2026-35526
Patch
CWE-770
High · CVSS 7.5
EPSS 0.3% (20th pct)2026-04-07

Common weakness types

The CWE weakness categories most often found in strawberry graphql CVEs. Follow any weakness for its full explanation.

Other strawberry products

Browse vulnerabilities for other products by strawberry.

strawberry1 CVEs

All strawberry vulnerabilities

Frequently asked questions

Common questions about strawberry graphql vulnerabilities.

How many CVEs does strawberry strawberry graphql have?: strawberry strawberry graphql has 5 published CVE records since 2026.
How many strawberry strawberry graphql CVEs are in CISA KEV?: None of strawberry strawberry graphql's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for strawberry strawberry graphql vulnerabilities?: Yes — 2 of strawberry strawberry graphql's CVEs have a known public exploit.
Which versions of strawberry strawberry graphql are affected?: 7 distinct strawberry strawberry graphql versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in strawberry strawberry graphql CVEs?: strawberry strawberry graphql's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-201 (Insertion of Sensitive Information Into Sent Data), CWE-306 (Missing Authentication for Critical Function), CWE-770 (Allocation of Resources Without Limits or Throttling).
What is the average severity of strawberry strawberry graphql CVEs?: The average CVSS base score across strawberry strawberry graphql's scored CVEs is 6.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track strawberry graphql vulnerabilities

Monitor new strawberry graphql vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing