npm/@strapi/plugin-users-permissions: high 8.2
Authentication Bypass in @strapi/plugin-users-permissions
Action: Upgrade @strapi/plugin-users-permissions to 4.6.0 or later.
npm i @strapi/plugin-users-permissions@4.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.1 | 4.6.0 | - |
Fixed versions
| 4.6.0 |
Sources
- osv: GHSA-xv3q-jrmm-4fxv
- https://github.com/strapi/strapi/security/advisories/GHSA-xv3q-jrmm-4fxv
- https://github.com/strapi/strapi/pull/15382
- https://github.com/strapi/strapi/commit/d0edd25ceb49d275d710bf8d59999a2c07072893
- https://github.com/strapi/strapi
- https://github.com/strapi/strapi/releases/tag/v4.6.0
published · modified · JSON