{"uuid": "97c1eaca-9c26-42b1-afb5-b174848d0f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-pfvf-fwfp-25mp", "type": "seen", "source": "https://bsky.app/profile/strawberry.rocks/post/3muopeviwkv2k", "content": "Strawberry GraphQL 0.326.1 has been released!\n\nThis release fixes a permission bypass (GHSA-pfvf-fwfp-25mp) where a custom\npermission could unintentionally authorize access to a protected field.\n\nWhen a permission's has_permission was a normal def that returned an\nawaitable (for example a...", "creation_timestamp": "2026-09-04T10:00:16.064631Z"}