npm/@strapi/content-type-builder CVE-2026-22599: high 7.2, EPSS 1.18%
Strapi Vulnerable to SQL Injection in Content Type Builder
Action: Upgrade @strapi/content-type-builder to 5.33.2 or later.
npm i @strapi/content-type-builder@5.33.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.33.2 | - |
Fixed versions
| 5.33.2 |
Sources
- osv: GHSA-3xcq-8mjw-h6mx
- nvd: CVE-2026-22599
- https://github.com/strapi/strapi/security/advisories/GHSA-3xcq-8mjw-h6mx
- https://github.com/strapi/strapi
- https://github.com/strapi/strapi/releases/tag/v4.26.1
- https://github.com/strapi/strapi/releases/tag/v5.33.2
CVE-2026-22599 · published · modified · JSON