Security Advisories for @strapi/admin in npm
Low
19 days ago
Strapi: Password Reset Does Not Revoke Existing Refresh Sessions
npm
@strapi/plugin-users-permissions, @strapi/admin
Potential
High
8 months ago
Strapi core vulnerable to sensitive data exposure via CORS misconfiguration
npm
@strapi/core
Potential
Moderate
8 months ago
Strapi Password Hashing is Missing Maximum Password Length Validation
npm
@strapi/core
Potential
High
8 months ago
Strapi Allows Unauthorized Access to Private Fields via parms.lookup
npm
@strapi/core
Moderate
about 1 year ago
Strapi allows Server-Side Request Forgery in Webhook function
npm
@strapi/admin
Potential
High
almost 2 years ago
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
npm
@strapi/plugin-users-permissions
Potential
Moderate
almost 2 years ago
@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling
npm
@strapi/plugin-upload
Potential
Low
almost 2 years ago
@strapi/plugin-content-manager leaks data via relations via the Admin Panel
npm
@strapi/plugin-content-manager
High
over 2 years ago
Strapi Improper Rate Limiting vulnerability
npm
@strapi/plugin-users-permissions, @strapi/admin
Potential
Moderate
over 2 years ago
Strapi's field level permissions not being respected in relationship title
npm
@strapi/plugin-content-manager
Moderate
over 2 years ago
Strapi may leak sensitive user information, user reset password, tokens via content-manager views
npm
@strapi/utils, @strapi/admin, @strapi/plugin-content-manager
Potential
Moderate
almost 3 years ago
Making all attributes on a content-type public without noticing it
npm
@strapi/database, @strapi/utils, @strapi/strapi
Potential
Critical
about 3 years ago
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
npm
@strapi/plugin-email, @strapi/plugin-users-permissions
Potential
High
about 3 years ago
Authentication Bypass in @strapi/plugin-users-permissions
npm
@strapi/plugin-users-permissions
Potential
Potential
Potential
Critical
over 6 years ago
Strapi allows unauthenticated attacker to reset admin password without valid reset token
npm
strapi