HIGH8.1npm
GHSA-37hx-4mcq-wc3h· CVE-2021-28128Weak Password Recovery Mechanism for Forgotten Password in Strapi
Modified: 11/8/2023
package
npm/strapi
pkg:npm/strapi
HIGH8.8npm
GHSA-4phg-hpqm-c3j4· CVE-2022-31367Strapi mishandles hidden attributes within admin API responses
Modified: 11/8/2023
MEDIUM6.5npm
GHSA-65wv-528r-m892· CVE-2020-13961Improper Input Validation in strapi
Modified: 11/8/2023
CRITICAL9.8npm
GHSA-6xc2-mj39-q599· CVE-2019-18818Strapi allows unauthenticated attacker to reset admin password without valid reset token
Modified: 11/8/2023
CRITICAL9.8npm
GHSA-7frv-9phw-vrvr· CVE-2020-27664Authorization bypass in Strapi
Modified: 11/8/2023
HIGH7.5npm
GHSA-85vg-grr5-pw42· CVE-2021-46440Insecure password handling vulnerability in Strapi
Modified: 11/8/2023
HIGH7.2npm
GHSA-9p2w-rmx4-9mw7· CVE-2019-19609Command Injection in strapi
Modified: 12/29/2025
CRITICAL9.8npm
GHSA-9qgm-w87q-hx89· CVE-2022-27263Unrestricted Upload of File with Dangerous Type in Strapi
Modified: 11/8/2023
HIGH8.8npm
GHSA-f6fm-r26q-p747· CVE-2022-30617Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Modified: 11/8/2023
MEDIUM4.8npm
GHSA-mcqm-6ff4-53qx· CVE-2022-29894Cross-site Scripting in Strapi
Modified: 11/8/2023
HIGH7.5npm
GHSA-vgj7-895j-gpr6· CVE-2022-30618Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Modified: 11/8/2023
MEDIUM6.1npm
GHSA-xrjf-phvv-r4vr· CVE-2022-0764Command injection in strapi
Modified: 11/8/2023