@strapi/admin vulnerabilities (npm)

4 vulnerabilities.

• @strapi/admin npm Strapi: Password Reset Does Not Revoke Existing Refresh Sessions CVE-2026-22706 Public exploitFix available 2.1 LowMay 13, 2026
• @strapi/admin npm Strapi allows Server-Side Request Forgery in Webhook function CVE-2024-52588 Fix available 4.9 MediumMay 27, 2025
• @strapi/admin npm Strapi Improper Rate Limiting vulnerability CVE-2023-38507 Fix available 7.3 HighSeptember 13, 2023
• @strapi/admin npm Strapi may leak sensitive user information, user reset password, tokens via content-manager views CVE-2023-36472 Fix available 5.8 MediumSeptember 13, 2023