CVE-2026-107727 | strawberry-graphql Strawberry GraphQL up to 0.312.3/0.327.1 Subscription handlers.py resource consumption

October 9, 2026 Yanac

A vulnerability identified as problematic has been detected in strawberry-graphql Strawberry GraphQL up to 0.312.3/0.327.1. Affected by this issue is some unknown functionality of the file strawberry/subscriptions/protocols/graphql_ws/handlers.py of the component Subscription Handler. This manipulation causes resource consumption.

The identification of this vulnerability is CVE-2026-107727. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More