| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-35523 | Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocol | strawberry-graphql | strawberry | High | 7.5 | 2026-04-07 15:58:18 | Deep Dive |
| CVE-2026-35526 | Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions | strawberry-graphql | strawberry | High | 7.5 | 2026-04-07 15:23:37 | Deep Dive |
| CVE-2025-22151 | Strawberry GraphQL has a type resolution vulnerability | strawberry-graphql | strawberry | Low | 3.7 | 2025-01-09 18:51:18 | Deep Dive |
| CVE-2024-47082 | Strawberry GraphQL Cross-Site Request Forgery (CSRF) vulnerability | strawberry-graphql | strawberry | Medium | 4.6 | 2024-09-25 17:48:24 | Deep Dive |