Security
فارسی
All products

strapi

npm · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Command Injection in strapiCVE-2019-19609 · GHSA-9P2W-RMX4-9MW7 strapi npm High Fix reported
Strapi mishandles hidden attributes within admin API responsesCVE-2022-31367 · GHSA-4PHG-HPQM-C3J4 @strapi/strapistrapi npm High Fix reported
Improper Removal of Sensitive Information Before Storage or Transfer in StrapiCVE-2022-30618 · GHSA-VGJ7-895J-GPR6 @strapi/strapistrapi npm High Fix reported
Improper Removal of Sensitive Information Before Storage or Transfer in StrapiCVE-2022-30617 · GHSA-F6FM-R26Q-P747 @strapi/strapistrapi npm High Fix reported
Cross-site Scripting in StrapiCVE-2022-29894 · GHSA-MCQM-6FF4-53QX strapi npm Medium No fix reported
Unrestricted Upload of File with Dangerous Type in StrapiCVE-2022-27263 · GHSA-9QGM-W87Q-HX89 strapi npm Critical No fix reported
Command injection in strapiCVE-2022-0764 · GHSA-XRJF-PHVV-R4VR strapi npm Medium Fix reported
Insecure password handling vulnerability in StrapiCVE-2021-46440 · GHSA-85VG-GRR5-PW42 @strapi/strapistrapi npm High Fix reported
Weak Password Recovery Mechanism for Forgotten Password in StrapiCVE-2021-28128 · GHSA-37HX-4MCQ-WC3H strapi npm High No fix reported
Authorization bypass in StrapiCVE-2020-27664 · GHSA-7FRV-9PHW-VRVR strapi npm Critical Fix reported
Improper Input Validation in strapiCVE-2020-13961 · GHSA-65WV-528R-M892 strapi npm Medium Fix reported
Strapi allows unauthenticated attacker to reset admin password without valid reset tokenCVE-2019-18818 · GHSA-6XC2-MJ39-Q599 strapi npm Critical Fix reported