High Security Advisories for @strapi/core in npm Clear Filters
High
11 months ago
Strapi core vulnerable to sensitive data exposure via CORS misconfiguration
npm
@strapi/core
High
11 months ago
Strapi Allows Unauthorized Access to Private Fields via parms.lookup
npm
@strapi/core
Potential
High
about 2 years ago
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
npm
@strapi/plugin-users-permissions
Potential
High
almost 3 years ago
Unauthorized Access to Private Fields in User Registration API
npm
@strapi/strapi, @strapi/plugin-users-permissions
Potential
High
almost 3 years ago
Strapi Improper Rate Limiting vulnerability
npm
@strapi/plugin-users-permissions, @strapi/admin
Potential
High
about 3 years ago
Leaking sensitive user information still possible by filtering on private with prefix fields
npm
@strapi/utils, @strapi/database
Potential
High
over 3 years ago
Strapi leaking sensitive user information by filtering on private fields
npm
@strapi/strapi
Potential
High
over 3 years ago
Authentication Bypass in @strapi/plugin-users-permissions
npm
@strapi/plugin-users-permissions
Potential
Potential
High
almost 5 years ago
Weak Password Recovery Mechanism for Forgotten Password in Strapi
npm
strapi