Strapi Strapi Open Source And Enterprise Headless Cms

1 CVEs affecting Strapi Strapi Open Source And Enterprise Headless Cms. Latest disclosed: 2026-10-27. Critical: 0, High: 0.

Top CVEs affecting Strapi Strapi Open Source And Enterprise Headless Cms
CVESeverityScorePublishedSummary
CVE-2026-1181722026-10-27The strapi/strapi (Core Admin / Webhook Runner) package is vulnerable to a semi-blind SSRF via a webhook follow-redirect. The webhook dispatcher automatically…