Known Vulnerabilities for products from Strapi
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Strapi".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-118172 json | Not Provided | 2026-10-27 | 2026-10-27 | |
| CVE-2026-118171 json | Not Provided | 2026-10-27 | 2026-10-27 | |
| CVE-2026-118170 json | Not Provided | 2026-10-27 | 2026-10-27 | |
| CVE-2026-108114 json | Not Provided | 2026-10-10 | 2026-10-14 | |
| CVE-2026-90561 json | Not Provided | 2026-09-13 | 2026-09-24 | |
| CVE-2026-85171 json | Not Provided | 2026-09-03 | 2026-09-03 | |
| CVE-2026-57997 json | Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not explicit... | Not Provided | 2026-06-29 | 2026-10-25 |
| CVE-2026-27886 json | Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not su... | Not Provided | 2026-05-14 | 2026-05-16 |
| CVE-2026-22707 json | Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content ... | Not Provided | 2026-05-14 | 2026-10-26 |
| CVE-2026-22706 json | Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, changing or resetting a user... | Not Provided | 2026-05-14 | 2026-10-26 |
| CVE-2026-22599 json | Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x bra... | Not Provided | 2026-05-14 | 2026-10-26 |
| CVE-2025-64526 json | Strapi is an open source headless content management system. In Strapi versions prior to 5.45.0, the rate-limit middleware in... | Not Provided | 2026-05-14 | 2026-10-14 |
| CVE-2025-53092 json | Strapi is an open source headless content management system. Strapi versions prior to 5.20.0 contain a CORS misconfiguration ... | Not Provided | 2025-10-16 | 2026-10-19 |
| CVE-2025-25298 json | Strapi is an open source headless CMS. The @strapi/core package before version 5.10.3 does not enforce a maximum password len... | Not Provided | 2025-10-16 | 2026-10-19 |
| CVE-2023-39345 json | strapi is an open-source headless CMS. Versions prior to 4.13.1 did not properly restrict write access to fielded marked as p... | 7.5 - HIGH | 2023-11-06 | 2023-11-14 |
| CVE-2023-38507 json | Strapi is the an open-source headless content management system. Prior to version 4.12.1, there is a rate limit on the login ... | 9.8 - CRITICAL | 2023-09-15 | 2023-09-21 |
| CVE-2023-37263 json | Strapi is the an open-source headless content management system. Prior to version 4.12.1, field level permissions are not res... | 2.7 - LOW | 2023-09-15 | 2023-09-20 |
| CVE-2023-36472 json | Strapi is an open-source headless content management system. Prior to version 4.11.7, an unauthorized actor can get access to... | 5.7 - MEDIUM | 2023-09-15 | 2023-09-21 |
| CVE-2023-34235 json | Strapi is an open-source headless content management system. Prior to version 4.10.8, it is possible to leak private fields i... | 7.5 - HIGH | 2023-07-25 | 2023-08-02 |
| CVE-2023-34093 json | Strapi is an open-source headless content management system. Prior to version 4.10.8, anyone (Strapi developers, users, plugi... | 7.1 - HIGH | 2023-07-25 | 2023-08-03 |
Known software with vulnerabilities from Strapi
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Strapi | Strapi | 0.0.1 |