strapi vulnerabilities (npm)

12 vulnerabilities.

• strapi npm Strapi mishandles hidden attributes within admin API responses CVE-2022-31367 Fix available 8.8 HighSeptember 27, 2022
• strapi npm Cross-site Scripting in Strapi CVE-2022-29894 4.8 MediumJune 13, 2022
• strapi npm Improper Removal of Sensitive Information Before Storage or Transfer in Strapi CVE-2022-30618 Fix available 7.5 HighMay 19, 2022
• strapi npm Improper Removal of Sensitive Information Before Storage or Transfer in Strapi CVE-2022-30617 Fix available 8.8 HighMay 19, 2022
• strapi npm Insecure password handling vulnerability in Strapi CVE-2021-46440 Fix available 7.5 HighMay 3, 2022
• strapi npm Unrestricted Upload of File with Dangerous Type in Strapi CVE-2022-27263 9.8 CriticalApril 12, 2022
• strapi npm Arbitrary Command Injection in strapi/strapi CVE-2022-0764 Fix available 6.1 MediumFebruary 26, 2022
• strapi npm Weak Password Recovery Mechanism for Forgotten Password in Strapi CVE-2021-28128 8.1 HighMay 6, 2021
• strapi npm Authorization bypass in Strapi CVE-2020-27664 Fix available 9.8 CriticalOctober 22, 2020
• strapi npm Improper Input Validation in strapi CVE-2020-13961 Fix available 6.5 MediumJune 19, 2020
• strapi npm Duplicate Advisory: OS Command Injection in Strapi CVE-2019-19609 Public exploitFix available EPSS 54.1% 7.2 HighDecember 5, 2019
• strapi npm Strapi allows unauthenticated attacker to reset admin password without valid reset token CVE-2019-18818 Public exploitFix available EPSS 97.6% 9.8 CriticalNovember 7, 2019