Products: 6
    Vulnerabilities: 41
    Known Exploited: 0
    5
    Critical Level Threats
    17
    High Level Threats
    17
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-57997

    Strapi users-permissions - JWT Algorithm Confusion via Missing Algorithm Configuration

    Last Modified: Jul 01, 2026
    Published: Jun 29, 2026

    CVE-2026-27886

    Strapi may leak sensitive data via relational filtering due to lack of query sanitization

    Last Modified: May 16, 2026
    Published: May 14, 2026

    CVE-2026-22707

    Strapi Upload Plugin MIME Validation Bypass via Content API

    Last Modified: May 17, 2026
    Published: May 14, 2026

    CVE-2026-22706

    Strapi: Password Reset Does Not Revoke Existing Refresh Sessions

    Last Modified: May 17, 2026
    Published: May 14, 2026

    CVE-2026-22599

    Strapi Vulnerable to SQL Injection in Content Type Builder

    Last Modified: May 17, 2026
    Published: May 14, 2026
    Items Per Page
    Strapi Vulnerabilities & Security CVEs | CVE-DB