MAL-2025-34020 Malicious code in strawberry-7b9-project (npm)

The package strawberry-7b9-project was found to contain malicious code...

MAL-2025-18247 Malicious code in delta-strawberry-hgqe (npm)

The package delta-strawberry-hgqe was found to contain malicious code...

MAL-2025-34065 Malicious code in strawberry-tangerine-tyjf (npm)

The package strawberry-tangerine-tyjf was found to contain malicious code...

MAL-2025-34034 Malicious code in strawberry-gjs-project (npm)

The package strawberry-gjs-project was found to contain malicious code...

MAL-2025-34041 Malicious code in strawberry-kiwi-dpyq (npm)

The package strawberry-kiwi-dpyq was found to contain malicious code...

MAL-2025-34043 Malicious code in strawberry-kiwi-hvgp (npm)

The package strawberry-kiwi-hvgp was found to contain malicious code...

MAL-2025-30593 Malicious code in project-v9k8z-strawberry (npm)

The package project-v9k8z-strawberry was found to contain malicious code...

MAL-2025-34016 Malicious code in strawberry-1n7-project (npm)

The package strawberry-1n7-project was found to contain malicious code...

MAL-2025-23159 Malicious code in india-strawberry-yam-fhydd (npm)

The package india-strawberry-yam-fhydd was found to contain malicious code...

MAL-2025-16953 Malicious code in cherry-strawberry-ycdz (npm)

The package cherry-strawberry-ycdz was found to contain malicious code...

MAL-2025-30684 Malicious code in project-z0u1z-strawberry (npm)

The package project-z0u1z-strawberry was found to contain malicious code...

MAL-2025-34069 Malicious code in strawberry-vanilla-nvel (npm)

The package strawberry-vanilla-nvel was found to contain malicious code...

MAL-2025-16952 Malicious code in cherry-strawberry-wmge (npm)

The package cherry-strawberry-wmge was found to contain malicious code...

CVE-2025-22151

Strawberry GraphQL is a library for creating GraphQL APIs. Starting in 0.182.0 and prior to version 0.257.0, a type confusion vulnerability exists in Strawberry GraphQL's relay integration that affects multiple ORM integrations Django, SQLAlchemy, Pydantic. The vulnerability occurs when multiple...

CVE-2024-47082

Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in all Strawberry HTTP view integrations. This made all Strawberry HTTP view integrations vulnerable ...

CVE-2024-10019

A vulnerability in the startappserver function of parisneo/lollms-webui V12 Strawberry allows for path traversal and OS command injection. The function does not properly sanitize the appname parameter, enabling an attacker to upload a malicious server.py file and execute arbitrary code by...

CVE-2024-8898

A path traversal vulnerability exists in the install and uninstall API endpoints of parisneo/lollms-webui version V12 Strawberry. This vulnerability allows attackers to create or delete directories with arbitrary paths on the system. The issue arises due to insufficient sanitization of...

CVE-2025-22151

Strawberry GraphQL is a library for creating GraphQL APIs. Starting in 0.182.0 and prior to version 0.257.0, a type confusion vulnerability exists in Strawberry GraphQL's relay integration that affects multiple ORM integrations Django, SQLAlchemy, Pydantic. The vulnerability occurs when multiple...

Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution

Vulnerability Summary A type confusion vulnerability exists in Strawberry GraphQL's relay integration that affects multiple ORM integrations Django, SQLAlchemy, Pydantic. The vulnerability occurs when multiple GraphQL types are mapped to the same underlying model while using the relay node...

Insufficient Type Distinction

Overview strawberry-graphql is an A library for creating GraphQL APIs Affected versions of this package are vulnerable to Insufficient Type Distinction in the relay integration that affects multiple ORM integrations Django, SQLAlchemy, Pydantic. An attacker can access unauthorized data by queryin...