Skip to content
OpenAdvisories

Package · npm

@strapi/database

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2023-34093

    Strapi allows actors to make all attributes on a content-type public without noticing it

    Strapi is an open-source headless content management system. Prior to version 4.10.8, anyone (Strapi developers, users, plugins) can make every attribute of a Content-Type public without knowing it. The vulnerability only affects the handling of content types…

    strapi strapi @strapi/strapi @strapi/utils npm