Brand
Strapi: actively exploited vulnerabilities
1 vulnerability in a Strapi product (Strapi) is in CISA’s catalog of exploited vulnerabilities. It was added on October 8, 2026.
-
1 vulnerability added in the last 12 months
-
1 exploited vulnerability in the catalog, in total
-
1 added in the last 30 days
By category
Add just one Strapi category to your radar, or open its page.
- Other products 1 vulnerability
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Strapi1 vulnerability, Other products
Name used by CISA: Strapi. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Strapi list.
- Rank 1
StrapiCVE-2023-22894
Strapi Cleartext Storage of Sensitive Information Vulnerability
Recently addedHunt for compromise (CISA)CVE from 2023, added in 2026
CVSS severity 4.9medium
Added Oct 8, 2026
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.