@strapi/plugin-content-manager (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @strapi/plugin-content-manager, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2023-37263 — CVSS 6.8 (medium): Strapi is the an open-source headless content management system. Prior to version 4.12.1, field level permissions are not respected in the…
• CVE-2023-36472 — CVSS 5.8 (medium): Strapi is an open-source headless content management system. Prior to version 4.11.7, an unauthorized actor can get access to user reset…
• CVE-2024-29181 — CVSS 2.3 (low): Strapi is an open-source content management system. Prior to version 4.19.1, a super admin can create a collection where an item in the…