{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:30.823Z","products":["strapi"],"actNowTotal":0,"results":[{"query":"strapi","matched":1,"actNow":0,"events":[{"id":"kev-2026-10-08-strapi-strapi","url":"https://securitythreatpulse.com/events/kev-2026-10-08-strapi-strapi","title":"Strapi: attackers can read data they should not see","verdict":"watch","verdictReason":"Attacks are confirmed, but the vulnerability is more than a year old and we see no ransomware use, public attack tools, internet-facing product, critical severity or high prediction score. Check whether it applies to you.","tier":null,"rankScore":3,"rankWhy":["Exploitation is confirmed by an authoritative source."],"rulesVersion":"v3","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2023-22894"],"vendor":"Strapi","product":"Strapi","affectedProducts":[{"kind":"direct","slug":"strapi/strapi","vendor":"Strapi","product":"Strapi","evidence":["kev"],"vendorKey":"strapi","productKey":"strapi"}],"category":{"id":"website","label":"Website or online store","why":"It runs public websites, online stores or the software behind them.","doThis":"Ask whoever runs your website or store to update it."},"summary":"Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.","cvss":7.2,"epss":0.04114,"exploitMaturity":"poc","kevListed":true,"kevDateAdded":"2026-10-08","kevDueDate":"2026-10-11","firstSeenAt":"2026-10-08T00:00:00.000Z","updatedAt":"2026-11-08T16:37:40.566Z","newestEvidenceAt":"2026-10-08T00:00:00.000Z"}]}]}