Advisories · Technology
strapi.
Every CVE that names strapi among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Strapi 5.47.0 through 5.57.0 Improper Authorization via Admin API Token Field Permissions
- strapi
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG
- strapi
- Cross-site scripting (XSS)
- CVSS 6.3 Medium
Strapi users-permissions - JWT Algorithm Confusion via Missing Algorithm Configuration
- strapi
- Weak cryptography or TLS