Product by Strapi
Strapi Open Source And Enterprise Headless CMS
3 known vulnerabilities in Strapi Open Source And Enterprise Headless CMS (Strapi), 0 of them actively exploited (CISA KEV).
Key figures
3
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Not rated | CVE-2026-118172 | Strapi Open Source and Enterprise Headless CMS: Server-Side Request Forgery (SSRF) | — | |
| Not rated | CVE-2026-118171 | Strapi Open Source and Enterprise Headless CMS: security vulnerability | — | |
| Not rated | CVE-2026-118170 | Strapi Open Source and Enterprise Headless CMS: Improper Access Control | — |