Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
400,921CVE records
2,761Published, last 7 days
1,733In CISA KEV
1,494Critical, last 30 days
5,599Analysed
02:17 UTCLast NVD sync
Filters Show:
39 results. Strapi Strapi.
Page 1 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-57997 | Medium | 6.3 |  Strapi | Broken cryptographic algorithm | - | - | 0.25% | Jun 29, 2026 |
| CVE-2026-27886 | Critical | 9.2 | Strapi | Path traversal | - | - | 2.5% | May 14, 2026 |
| CVE-2026-22707 | Medium | 5.3 | Strapi | Unrestricted file upload | - | - | 0.19% | May 14, 2026 |
| CVE-2026-22706 | Low | 2.1 | Strapi | Insufficient session expiration | - | - | 0.34% | May 14, 2026 |
| CVE-2026-22599 | Critical | 9.3 | Strapi | SQL injection | - | - | 1.2% | May 14, 2026 |
| CVE-2025-64526 | Medium | 6.9 | Strapi | Improper restriction of authentica | - | - | 0.49% | May 14, 2026 |
| CVE-2025-53092 | Medium | 6.5 | Strapi | Information exposure | - | - | 0.29% | Oct 16, 2025 |
| CVE-2025-25298 | Medium | 6.3 | Strapi | CWE-261 | - | 1 ref | 0.40% | Oct 16, 2025 |
| CVE-2024-56143 | High | 8.2 | Strapi | Insecure direct object reference | - | 1 ref | 0.40% | Oct 16, 2025 |
| CVE-2024-52588 | High | 7.5 | Strapi | Server-side request forgery (SSRF) | - | 1 ref | 0.56% | May 29, 2025 |
| CVE-2024-37818 | High | 8.6 | Strapi | Server-side request forgery (SSRF) | - | 2 refs | 0.56% | Jun 20, 2024 |
| CVE-2024-34065 | High | 8.1 | Strapi | Authentication bypass by capture-r | - | 2 refs | 0.70% | Jun 12, 2024 |
| CVE-2024-31217 | Medium | 6.5 | Strapi | CWE-248 | - | 2 refs | 0.74% | Jun 12, 2024 |
| CVE-2024-29181 | Low | 3.5 | Strapi | Insecure direct object reference | - | 2 refs | 0.39% | Jun 12, 2024 |
| CVE-2023-39345 | High | 7.5 | Strapi | Improper authentication | - | 2 refs | 0.59% | Nov 6, 2023 |
| CVE-2023-38507 | Critical | 9.8 | Strapi | Allocation without limits | - | 2 refs | 0.96% | Sep 15, 2023 |
| CVE-2023-37263 | Low | 2.7 | Strapi | Information exposure | - | 2 refs | 0.64% | Sep 15, 2023 |
| CVE-2023-36472 | Medium | 5.7 | Strapi | Information exposure | - | 2 refs | 0.67% | Sep 15, 2023 |
| CVE-2023-34235 | High | 7.5 | Strapi | Information exposure | - | 2 refs | 1.1% | Jul 25, 2023 |
| CVE-2023-34093 | High | 7.1 | Strapi | Information exposure | - | 2 refs | 0.72% | Jul 25, 2023 |
