strapi
An open source headless CMS solution to create and manage your own API. It provides a powerful dashboard and features to make your life easier. Databases supported: MongoDB, MySQL, MariaDB, PostgreSQL, SQLite
Security Advisories for strapi in npm
Potential
High
10 months ago
Strapi Allows Unauthorized Access to Private Fields via parms.lookup
npm
@strapi/core
Likely fork
High
almost 3 years ago
Unauthorized Access to Private Fields in User Registration API
npm
@strapi/strapi, @strapi/plugin-users-permissions
Potential
Moderate
almost 3 years ago
Strapi may leak sensitive user information, user reset password, tokens via content-manager views
npm
@strapi/utils, @strapi/admin, @strapi/plugin-content-manager
Potential
High
over 3 years ago
Authentication Bypass in @strapi/plugin-users-permissions
npm
@strapi/plugin-users-permissions
High
almost 4 years ago
Strapi mishandles hidden attributes within admin API responses
npm
@strapi/strapi, strapi
High
about 4 years ago
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
npm
@strapi/strapi, strapi
High
about 4 years ago
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
npm
@strapi/strapi, strapi
Potential
High
almost 5 years ago
Weak Password Recovery Mechanism for Forgotten Password in Strapi
npm
strapi
Critical
over 6 years ago
Strapi allows unauthenticated attacker to reset admin password without valid reset token
npm
strapi