Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
npm @strapi/plugin-users-permissions Security Advisories
Browse all Security Advisories for npm @strapi/plugin-users-permissions
Loading...
High
Ecosystems: npm
Packages: @strapi/plugin-users-permissions
Source: GitHub Advisory Database
Blast Radius: 24.6
Published: 8 months ago
GSA_kwCzR0hTQS13cnZoLXJjbXItOXFmY84AA8_E
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypassEcosystems: npm
Packages: @strapi/plugin-users-permissions
Source: GitHub Advisory Database
Blast Radius: 24.6
Published: 8 months ago
High
Ecosystems: npm
Packages: @strapi/strapi, @strapi/plugin-users-permissions
Source: GitHub Advisory Database
Blast Radius: 26.4
Published: about 1 year ago
GSA_kwCzR0hTQS1nYzdwLWo1eG0teHhoMs4AA26o
Unauthorized Access to Private Fields in User Registration APIEcosystems: npm
Packages: @strapi/strapi, @strapi/plugin-users-permissions
Source: GitHub Advisory Database
Blast Radius: 26.4
Published: about 1 year ago
High
Ecosystems: npm
Packages: @strapi/plugin-users-permissions, @strapi/admin
Source: GitHub Advisory Database
Blast Radius: 25.3
Published: over 1 year ago
GSA_kwCzR0hTQS0yNHEyLTU5aG0tcmg5cs4AA12t
Strapi Improper Rate Limiting vulnerabilityEcosystems: npm
Packages: @strapi/plugin-users-permissions, @strapi/admin
Source: GitHub Advisory Database
Blast Radius: 25.3
Published: over 1 year ago
Critical
Ecosystems: npm
Packages: @strapi/plugin-email, @strapi/plugin-users-permissions
Source: GitHub Advisory Database
Blast Radius: 34.7
Published: almost 2 years ago
GSA_kwCzR0hTQS0yaDg3LTRxMnctdjRoZs4AAy4o
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions PluginEcosystems: npm
Packages: @strapi/plugin-email, @strapi/plugin-users-permissions
Source: GitHub Advisory Database
Blast Radius: 34.7
Published: almost 2 years ago
Moderate
Ecosystems: npm
Packages: @strapi/plugin-users-permissions
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
GSA_kwCzR0hTQS01ODN4LTIzaDktZjV3N84AAy3y
Strapi does not verify the access or ID tokens issued during the OAuth flowEcosystems: npm
Packages: @strapi/plugin-users-permissions
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
High
Ecosystems: npm
Packages: @strapi/plugin-users-permissions
Source: GitHub Advisory Database
Blast Radius: 28.4
Published: almost 2 years ago
GSA_kwCzR0hTQS14djNxLWpybW0tNGZ4ds4AAy3O
Authentication Bypass in @strapi/plugin-users-permissionsEcosystems: npm
Packages: @strapi/plugin-users-permissions
Source: GitHub Advisory Database
Blast Radius: 28.4
Published: almost 2 years ago
Statistics
Advisories: 21,176
Packages: 9,246
Repositories: 1
Ecosystems: 12
Packages: 9,246
Repositories: 1
Ecosystems: 12
Filter by Severity
Filter by Ecosystem
Filter by Package
parse-server
31
directus
30
electron
26
@openzeppelin/contracts-upgradeable
21
next
20
@openzeppelin/contracts
20
sequelize
16
tinymce
16
ckeditor4
15
ghost
15
joplin
14
undici
14
swagger-ui
14
strapi
13
angular
13
nodebb
12
vm2
12
handlebars
11
tinymce/tinymce
11
matrix-js-sdk
11
flowise
11
TinyMCE
11
marked
11
bootstrap
11
nocodb
10
matrix-react-sdk
9
next-auth
9
@strapi/strapi
9
@evershop/evershop
9
serve
9
systeminformation
9
twbs/bootstrap
9
org.webjars:bootstrap
9
bootstrap
9
bootstrap
9
jsrsasign
8
org.webjars.npm:jquery
8
url-parse
8
node-forge
8
jquery-rails
8
vite
8
matrix-appservice-irc
8
steal
8
jquery
8
express-cart
8
uptime-kuma
8
tar
8
urijs
8
editor.md
8
npm
8
validator
8
dompurify
7
bootstrap.sass
7
elliptic
7
mongoose
7
hapi
7
hermes-engine
7
jquery-ui-rails
7
jQuery.UI.Combined
7
org.webjars.npm:jquery-ui
7
jquery-ui
7
shescape
7
bootstrap-sass
7
jQuery
7
total.js
7
sanitize-html
7
snyk-broker
7
lodash
7
aaptjs
6
safe-eval
6
rsshub
6
@strapi/plugin-users-permissions
6
bootstrap-sass
6
parse-url
6
openpgp
5
express
5
mermaid
5
@saltcorn/server
5
rendertron
5
yarn
5
ejs
5
total4
5
lodash-es
5
@sveltejs/kit
5
prismjs
5
dojo
5
sweetalert2
5
ws
5
keystone
5
mysql2
5
public
5
ua-parser-js
5
katex
5
xlsx
5
@lobehub/chat
5
axios
5
vditor
5
mattermost-desktop
5
meshcentral
4
aws-iot-device-sdk-v2
4
software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk
4
qs
4
ecstatic
4
lunary
4
auth0-js
4
awsiotsdk
4
glance
4
valine
4
jsonwebtoken
4
apostrophe
4
materialize-css
4
generator-jhipster
4
@keystone-6/core
4
@directus/api
4
hono
4
remarkable
4
mongo-express
4
hummus
4
@backstage/plugin-scaffolder-backend
4
convert-svg-core
4
muhammara
4
simple-git
4
simple-markdown
4
follow-redirects
4
fast-xml-parser
4
realms-shim
4
apollo-server-core
4
moment
4
safer-eval
4
engine.io
4
vega
4
auth0-lock
4
trix
4
fastify
4
statics-server
3
typeorm
3
buttle
3
ids-enterprise
3
@janhq/core
3
localhost-now
3
jspdf
3
bson
3
xmldom
3
snyk
3
nodemailer
3
node-fetch
3
mathjs
3
astro
3
simplehttpserver
3
ses
3
node-opcua
3
object-path
3
@sequelize/core
3
@ckeditor/ckeditor5-markdown-gfm
3
locutus
3
ag-grid-community
3
renovate
3
socket.io-file
3
slpjs
3
sails
3
blamer
3
@jmondi/url-to-png
3
agnai
3
mixme
3
layui
3
highcharts
3
serialize-to-js
3
froala-editor
3
docsify
3
django-tinymce
3
jose
3
raneto
3
browserify-shim
3
@strapi/utils
3
@materializecss/materialize
3
send
3
@strapi/plugin-content-manager
3
@commercial/subtext
3
m-server
3
convict
3
subtext
3
braces
3
connect
3
postcss
3
n8n
3
stimulsoft-dashboards-js
3
notevil
3
parsel
3
apollo-server
3
mysql
3
bin-links
3
json-ptr
3
@vrite/sdk
3
ftp-srv
3
protobufjs
3
openmct
3
slp-validate
3
uap-core
3
@apollo/server
3
jquery-validation
3
Filter by Repository