Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 9
Reset filtersStrawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy
Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution
Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification
Strawberry GraphQL has a Circular Fragment Reference DOS
Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs
strawberry-graphql: Authentication bypass via legacy graphql-ws WebSocket subprotocol
strawberry-graphql: Denial of Service via unbounded WebSocket subscriptions
Cross-Site Request Forgery (CSRF) in strawberry-graphql
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.