Strapi mishandles hidden attributes within admin API responses
Modified: 11/8/2023
package
pkg:npm/%40strapi/strapi
Strapi mishandles hidden attributes within admin API responses
Modified: 11/8/2023
Strapi is vulnerable to Insufficient Session Expiration
Modified: 10/22/2025
Strapi 4.1.12 Cross-site Scripting via crafted file
Modified: 3/21/2024
Insecure password handling vulnerability in Strapi
Modified: 11/8/2023
Making all attributes on a content-type public without noticing it
Modified: 11/8/2023
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Modified: 11/8/2023
Unauthorized Access to Private Fields in User Registration API
Modified: 11/8/2023
Strapi leaking sensitive user information by filtering on private fields
Modified: 11/8/2023
Strapi Server-Side Request Forgery (SSRF)
Modified: 10/4/2024
Strapi may leak sensitive data via relational filtering due to lack of query sanitization
Modified: 5/16/2026
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Modified: 11/8/2023