MEDIUMnpm
GHSA-2cjv-6wg9-f4f3· CVE-2025-25298Strapi Password Hashing is Missing Maximum Password Length Validation
Modified: 11/27/2025
package
npm/@strapi/core
pkg:npm/%40strapi/core
HIGH8.2npm
GHSA-495j-h493-42q2· CVE-2024-56143Strapi Allows Unauthorized Access to Private Fields via parms.lookup
Modified: 10/16/2025
HIGH7.5npm
GHSA-9329-mxxw-qwf8· CVE-2025-53092Strapi core vulnerable to sensitive data exposure via CORS misconfiguration
Modified: 2/3/2026