ST
Product
strapi
by strapi · last CVE Oct 10, 2026
On CISA KEVExploited in the wild
41
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 4High 20Medium 15Low 2
Watch

Add strapi to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-22894
In wildKEV
4.9
4%
Apr 19
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter
Affected: 3.2.1 before 4.8.0
Showing 1