@strapi/database (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @strapi/database, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2023-34235 — CVSS 8.6 (high): Strapi is an open-source headless content management system. Prior to version 4.10.8, it is possible to leak private fields if one is using…
• CVE-2023-34093 — CVSS 4.8 (medium): Strapi is an open-source headless content management system. Prior to version 4.10.8, anyone (Strapi developers, users, plugins) can make…