Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filtersStrapi is vulnerable to Insufficient Session Expiration
Strapi Server-Side Request Forgery (SSRF)
Unauthorized Access to Private Fields in User Registration API
Making all attributes on a content-type public without noticing it
Strapi leaking sensitive user information by filtering on private fields
Strapi mishandles hidden attributes within admin API responses
Strapi 4.1.12 Cross-site Scripting via crafted file
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Insecure password handling vulnerability in Strapi
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.