strapi
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 42 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 7, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Strapi 5.47.0 through 5.57.0 Improper Authorization via Admin API Token Field Permissions
Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG
Strapi users-permissions - JWT Algorithm Confusion via Missing Algorithm Configuration
Strapi may leak sensitive data via relational filtering due to lack of query sanitization
Strapi Upload Plugin MIME Validation Bypass via Content API
Strapi: Password Reset Does Not Revoke Existing Refresh Sessions
Strapi Vulnerable to SQL Injection in Content Type Builder
Strapi has a rate limit bypass on users-permissions plugin via attacker-controlled email keying
Strapi core vulnerable to sensitive data exposure via CORS misconfiguration
Missing Maximum Password Length Validation in Strapi Password Hashing
Monitor strapi in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.