strapi
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 41 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 7, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG
Strapi users-permissions - JWT Algorithm Confusion via Missing Algorithm Configuration
Strapi may leak sensitive data via relational filtering due to lack of query sanitization
Strapi Upload Plugin MIME Validation Bypass via Content API
Strapi: Password Reset Does Not Revoke Existing Refresh Sessions
Strapi Vulnerable to SQL Injection in Content Type Builder
Strapi has a rate limit bypass on users-permissions plugin via attacker-controlled email keying
Strapi core vulnerable to sensitive data exposure via CORS misconfiguration
Missing Maximum Password Length Validation in Strapi Password Hashing
Strapi Allows Unauthorized Access to Private Fields via parms.lookup
Monitor strapi in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.