All products

@strapi/admin

npm · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Strapi Improper Rate Limiting vulnerabilityCVE-2023-38507 · GHSA-24Q2-59HM-RH9R @strapi/admin@strapi/plugin-users-permissions npm High Fix reported
Strapi may leak sensitive user information, user reset password, tokens via content-manager viewsCVE-2023-36472 · GHSA-V8GG-4MQ2-88Q4 @strapi/admin@strapi/plugin-content-manager npm Medium Fix reported
Strapi: Password Reset Does Not Revoke Existing Refresh SessionsCVE-2026-22706 · GHSA-HVP3-26WX-G2W4 @strapi/admin@strapi/plugin-users-permissions npm Low Fix reported
Strapi allows Server-Side Request Forgery in Webhook functionCVE-2024-52588 · GHSA-V8WJ-F5C7-PVXF @strapi/admin npm Medium Fix reported