CVE-2022-0764
CVE-2022-0764 · Arbitrary Command Injection in strapi/strapi
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.
CVSS 6.1 · Medium · EPSS 0.7% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
strapi/strapi
- Versions
- ≥ unspecified, < 4.1.0: Affected (custom)
Update to 4.1.0
strapi npm
- Affected ranges
- SEMVER: < 4.1.0
Update to 4.1.0