Skip to content

Product

strapi @strapi/plugin-content-type-builder vulnerabilities

1 published CVE affecting strapi @strapi/plugin-content-type-builder, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest strapi @strapi/plugin-content-type-builder CVEs

Newest publication first

  1. CVE-2026-22599 Strapi Vulnerable to SQL Injection in Content Type Builder

    Published
    CriticalCVSS 9.3

    Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.33.2, a database-query injection vulnerability existed in the Strapi Content-Type Builder write API. An authenticated administrator could in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.