Vulnerabilities in Strapi
29 resultsCVE-2024-29181LOW@strapi/plugin-content-manager leaks data via relations via the Admin PanelEPSS 0.4%CVE-2026-22706LOWStrapi: Password Reset Does Not Revoke Existing Refresh SessionsEPSS 0.3%CVE-2025-53092MEDIUMStrapi core vulnerable to sensitive data exposure via CORS misconfigurationEPSS 0.3%CVE-2026-118170CRITICALCVE-2026-118170EPSS 0.3%CVE-2026-57997MEDIUMStrapi users-permissions - JWT Algorithm Confusion via Missing Algorithm ConfigurationEPSS 0.2%CVE-2026-118171MEDIUMCVE-2026-118171EPSS 0.2%CVE-2026-118172MEDIUMCVE-2026-118172EPSS 0.2%CVE-2026-108114MEDIUMStrapi 5.47.0 through 5.57.0 Improper Authorization via Admin API Token Field PermissionsEPSS 0.2%CVE-2026-22707MEDIUMStrapi Upload Plugin MIME Validation Bypass via Content APIEPSS 0.2%