@strapi/utils

This hub aggregates every CVE we track for @strapi/utils, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 3 most recently published vulnerabilities affecting @strapi/utils.

• CVE-2023-36472Strapi may leak sensitive user information, user reset password, tokens via content-manager views5.8Sep 15, 2023
• CVE-2023-34235Leaking sensitive user information still possible by filtering on private with prefix fields8.6Jul 25, 2023
• CVE-2023-34093Strapi allows actors to make all attributes on a content-type public without noticing it4.8Jul 25, 2023