Executive brief
Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution
Affected products
- PyPI strawberry-graphql
Junglewise Threat Intelligence
CVE-2025-22151: PYSEC-2026-1946 - Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution
CVE-2025-22151 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: strawberry-graphql (PyPI). Vendors: PyPI.
Related threats
- Strawberry GraphQL DoS via MaxAliasesLimiter bypass in FragmentSpreadNode
- Strawberry GraphQL Denial of Service via Uncontrolled Recursion in QueryDepthLimiter
- Strawberry GraphQL sensitive information leak in GraphiQL template
- Strawberry GraphQL Denial of Service via unbounded WebSocket subscriptions
- strawberry-graphql authentication bypass in legacy WebSocket subprotocol