Skip to content

Strapi

In 2 briefs, most recently 7 April 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

1 Strapi vulnerability is on CISA's list of vulnerabilities exploited in the wild. Most recent:

CVE-2023-22894 Strapi Cleartext Storage of Sensitive Information Vulnerability added 2026-10-08

Coverage in DanSec Daily

Tue 07 Apr Wynn Resorts breach affecting 21,000 employees, Drift Protocol's $280M in-person crypto heist, and Flowise and FortiClient EMS exploits.
Sun 05 Apr European Commission breach via Trivy supply chain attack, Cisco source code theft, and FortiClient EMS CVE-2026-35616 actively exploited in the wild.