Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/%40strapi/utils@4.11.2
purl pkg:npm/%40strapi/utils@4.11.2
Next non-vulnerable version 4.11.7
Latest non-vulnerable version 4.11.7
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-adab-ztym-ayhd
Aliases:
CVE-2023-36472
GHSA-v8gg-4mq2-88q4
Strapi may leak sensitive user information, user reset password, tokens via content-manager views Attackers can get access to user reset password tokens if they have the configure view permissions.
4.11.7
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T04:07:10.804524+00:00 GitLab Importer Affected by VCID-adab-ztym-ayhd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/@strapi/utils/CVE-2023-36472.yml 38.6.0