https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:29:08.543359+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-45739 CVE-2026-45739 — Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs 2026-10-08T14:29:08.558752+00:00

Affected: strawberry-graphql strawberry

Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.288.4 through 0.315.3, Strawberry's bundled GraphiQL template wrote values from the GraphiQL headers editor into the browser URL query string. If a user entered a sensitive header, such as `Authorization: Bearer <token>`, the value could become visible in browser history, copied links, and server/proxy/CDN access logs after a page reload or shared request. Version 0.315.4 patches the issue.