npm/@strapi/core CVE-2025-25298: medium 5.3, EPSS 0.40%
Strapi Password Hashing is Missing Maximum Password Length Validation
Action: Upgrade @strapi/core to 5.10.3 or later.
npm i @strapi/core@5.10.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.10.3 | - |
Fixed versions
| 5.10.3 |
Sources
- osv: GHSA-2cjv-6wg9-f4f3
- nvd: CVE-2025-25298
- https://github.com/strapi/strapi/security/advisories/GHSA-2cjv-6wg9-f4f3
- https://github.com/strapi/strapi/commit/41f8cdf116f7f464dae7d591e52d88f7bfa4b7cb
- https://github.com/strapi/strapi
CVE-2025-25298 · published · modified · JSON