@strapi/core vulnerabilities (npm)

3 vulnerabilities.

• @strapi/core npm Strapi core vulnerable to sensitive data exposure via CORS misconfiguration CVE-2025-53092 Fix available 6.5 MediumOctober 16, 2025
• @strapi/core npm Missing Maximum Password Length Validation in Strapi Password Hashing CVE-2025-25298 Fix available 6.3 MediumOctober 16, 2025
• @strapi/core npm Strapi Allows Unauthorized Access to Private Fields via parms.lookup CVE-2024-56143 Fix available 8.2 HighOctober 16, 2025