@strapi/strapi vulnerabilities (npm)
11 vulnerabilities.
-
@strapi/strapinpm Strapi may leak sensitive data via relational filtering due to lack of query sanitization 9.2 Critical -
@strapi/strapinpm Lack of JWT Expiration after Log Out in Strapi 6.3 Medium -
@strapi/strapinpm Strapi Server-Side Request Forgery (SSRF) 8.6 High -
@strapi/strapinpm Unauthorized Access to Private Fields in User Registration API in strapi 7.6 High -
@strapi/strapinpm Strapi allows actors to make all attributes on a content-type public without noticing it 4.8 Medium -
@strapi/strapinpm Strapi leaking sensitive user information by filtering on private fields 4.9 Medium -
@strapi/strapinpm Strapi mishandles hidden attributes within admin API responses 8.8 High -
@strapi/strapinpm Strapi 4.1.12 Cross-site Scripting via crafted file 8.8 High -
@strapi/strapinpm Improper Removal of Sensitive Information Before Storage or Transfer in Strapi 7.5 High -
@strapi/strapinpm Improper Removal of Sensitive Information Before Storage or Transfer in Strapi 8.8 High -
@strapi/strapinpm Insecure password handling vulnerability in Strapi 7.5 High