Skip to content
OpenAdvisories

Package · npm

@strapi/database

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2023-34235

    Leaking sensitive user information still possible by filtering on private with prefix fields

    Strapi is an open-source headless content management system. Prior to version 4.10.8, it is possible to leak private fields if one is using the `t(number)` prefix. Knex query allows users to change the default prefix. For example, if someone changes the prefi…

    strapi strapi @strapi/utils @strapi/database npm