@strapi/plugin-users-permissions
Protect your API with a full-authentication process based on JWT
Security Advisories for @strapi/plugin-users-permissions in npm
Low
3 months ago
Strapi: Password Reset Does Not Revoke Existing Refresh Sessions
npm
@strapi/plugin-users-permissions, @strapi/admin
Moderate
3 months ago
Strapi has a rate limit bypass on users-permissions plugin via attacker-controlled email keying
npm
@strapi/plugin-users-permissions
High
about 2 years ago
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
npm
@strapi/plugin-users-permissions
Potential
Low
about 2 years ago
@strapi/plugin-content-manager leaks data via relations via the Admin Panel
npm
@strapi/plugin-content-manager
High
almost 3 years ago
Unauthorized Access to Private Fields in User Registration API
npm
@strapi/strapi, @strapi/plugin-users-permissions
High
almost 3 years ago
Strapi Improper Rate Limiting vulnerability
npm
@strapi/plugin-users-permissions, @strapi/admin
Potential
Moderate
almost 3 years ago
Strapi's field level permissions not being respected in relationship title
npm
@strapi/plugin-content-manager
Critical
over 3 years ago
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
npm
@strapi/plugin-email, @strapi/plugin-users-permissions
Moderate
over 3 years ago
Strapi does not verify the access or ID tokens issued during the OAuth flow
npm
@strapi/plugin-users-permissions
High
over 3 years ago
Authentication Bypass in @strapi/plugin-users-permissions
npm
@strapi/plugin-users-permissions
Potential
Potential
Potential
Potential
High
almost 5 years ago
Weak Password Recovery Mechanism for Forgotten Password in Strapi
npm
strapi
Potential
Potential
Potential