HIGH7.3npm
GHSA-24q2-59hm-rh9r· CVE-2023-38507Strapi Improper Rate Limiting vulnerability
Modified: 9/10/2026
package
npm/@strapi/admin
pkg:npm/%40strapi/admin
LOWnpm
GHSA-hvp3-26wx-g2w4· CVE-2026-22706Strapi: Password Reset Does Not Revoke Existing Refresh Sessions
Modified: 5/16/2026
MEDIUM5.8npm
GHSA-v8gg-4mq2-88q4· CVE-2023-36472Strapi may leak sensitive user information, user reset password, tokens via content-manager views
Modified: 9/10/2026
MEDIUM4.9npm
GHSA-v8wj-f5c7-pvxf· CVE-2024-52588Strapi allows Server-Side Request Forgery in Webhook function
Modified: 5/29/2025