npm/@strapi/strapi CVE-2025-3930: medium 6.3, EPSS 0.69%
Strapi is vulnerable to Insufficient Session Expiration
Action: Upgrade @strapi/strapi to 5.24.1 or later.
npm i @strapi/strapi@5.24.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.24.1 | - |
Fixed versions
| 5.24.1 |
Sources
- osv: GHSA-4r8w-3jww-m2rp
- nvd: CVE-2025-3930
- https://cert.pl/en/posts/2025/06/CVE-2025-3930
- https://github.com/strapi/strapi
- https://strapi.io
- https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve-October-2025
CVE-2025-3930 · published · modified · JSON