CVE-2026-35523 | strawberry-graphql strawberry up to 0.312.2 Start Message connection_init missing authentication

A vulnerability, which was classified as critical, was found in strawberry-graphql strawberry up to 0.312.2. This impacts the function connection_init of the component Start Message Handler. Such manipulation leads to missing authentication.

This vulnerability is documented as CVE-2026-35523. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.