@strapi/utils (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @strapi/utils, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2023-34235 — CVSS 8.6 (high): Strapi is an open-source headless content management system. Prior to version 4.10.8, it is possible to leak private fields if one is using…
• CVE-2023-36472 — CVSS 5.8 (medium): Strapi is an open-source headless content management system. Prior to version 4.11.7, an unauthorized actor can get access to user reset…
• CVE-2023-34093 — CVSS 4.8 (medium): Strapi is an open-source headless content management system. Prior to version 4.10.8, anyone (Strapi developers, users, plugins) can make…