Strapi
6 known vulnerabilities
Top Products
Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not exp
Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did n
Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Con
Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, changing or resetting a
Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.
Strapi is an open source headless content management system. In Strapi versions prior to 5.45.0, the rate-limit middlewa
Frequently Asked Questions
How many CVEs affect Strapi?
Strapi has 6 CVE records in our database, including 0 critical and 2 high severity vulnerabilities.
What are the most severe Strapi vulnerabilities?
Strapi has 0 critical severity (CVSS 9.0+) and 2 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Strapi vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Strapi products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Strapi Vulnerabilities
CyberStrike scans your infrastructure for Strapi vulnerabilities and provides real-time remediation guidance.
Get Started