Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

strapi

npm

An open source headless CMS solution to create and manage your own API. It provides a powerful dashboard and features to make your life easier. Databases supported: MongoDB, MySQL, MariaDB, PostgreSQL, SQLite

View on github.com · View on npmjs.org

Security Advisories for strapi in npm

High
about 3 years ago

Strapi mishandles hidden attributes within admin API responses GSA_kwCzR0hTQS00cGhnLWhwcW0tYzNqNM4AAvGG

npm @strapi/strapi, strapi
Moderate
over 3 years ago

Cross-site Scripting in Strapi GSA_kwCzR0hTQS1tY3FtLTZmZjQtNTNxeM4AArjX

npm strapi
Moderate
over 3 years ago

Improper Input Validation in strapi GSA_kwCzR0hTQS02NXd2LTUyOHItbTg5Ms4AAlF4

npm strapi
High
over 3 years ago

Improper Removal of Sensitive Information Before Storage or Transfer in Strapi GSA_kwCzR0hTQS1mNmZtLXIyNnEtcDc0N84AAgbL

npm @strapi/strapi, strapi
High
over 3 years ago

Improper Removal of Sensitive Information Before Storage or Transfer in Strapi GSA_kwCzR0hTQS12Z2o3LTg5NWotZ3ByNs4AAgbK

npm @strapi/strapi, strapi
High
over 3 years ago

Insecure password handling vulnerability in Strapi GSA_kwCzR0hTQS04NXZnLWdycjUtcHc0Ms3dNw

npm @strapi/strapi, strapi
Critical
over 3 years ago

Unrestricted Upload of File with Dangerous Type in Strapi GSA_kwCzR0hTQS05cWdtLXc4N3EtaHg4Oc06zg

npm strapi
Moderate
over 3 years ago

Command injection in strapi GSA_kwCzR0hTQS14cmpmLXBodnYtcjR2cs0vLg

npm strapi
High
almost 4 years ago

OS Command Injection in Strapi MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTQ5dnYtNnE3cS13NWNm

npm strapi
High
about 4 years ago

Weak Password Recovery Mechanism for Forgotten Password in Strapi GSA_kwCzR0hTQS0zN2h4LTRtY3Etd2MzaM0WMQ

npm strapi
Critical
over 4 years ago

Authorization bypass in Strapi MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdmcnYtOXBody12cnZy

npm strapi
High
about 5 years ago

Command Injection in strapi MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTlwMnctcm14NC05bXc3

npm strapi
Critical
almost 6 years ago

Strapi allows unauthenticated attacker to reset admin password without valid reset token MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4YzItbWozOS1xNTk5

npm strapi

Filter by Severity

High 7 Moderate 3 Critical 3