[ Vendor · 2 CVEs ]
strapi
CVEs affecting strapi published in the last 30 days, plus any strapi CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108114 | 10 Oct 2026 | CVSS 4.3 | strapiStrapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access… | |
| CVE-2023-22894 | 19 Apr 2023 | CVSS 4.9 | Strapi Cleartext Storage of Sensitive InformationStrapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The… | Exploited |