Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:28:22 +0000 EUVD-2026-58961 https://cve.radiocsirt.org/vuln/euvd-2026-58961 EUVD-2026-58961 https://cve.radiocsirt.org/vuln/euvd-2026-58961 fkie_cve-2019-18818 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18818 <p>strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.</p> <p>strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-18818 GHSA-6xc2-mj39-q599 — Strapi allows unauthenticated attacker to reset admin password without valid reset token https://cve.radiocsirt.org/vuln/ghsa-6xc2-mj39-q599 <p><strong>Affected:</strong> npm: strapi</p> <p>Versions of `strapi` prior to 3.0.0-beta.17.5 are vulnerable to Privilege Escalation. The password reset routes allows an unauthenticated attacker to reset an admin&#39;s password without providing a valid password reset token.</p> <p>## Recommendation</p> <p>Upgrade to version 3.0.0-beta.17.5 or later.</p> <p><strong>Affected:</strong> npm: strapi</p> <p>Versions of `strapi` prior to 3.0.0-beta.17.5 are vulnerable to Privilege Escalation. The password reset routes allows an unauthenticated attacker to reset an admin&#39;s password without providing a valid password reset token.</p> <p>## Recommendation</p> <p>Upgrade to version 3.0.0-beta.17.5 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-6xc2-mj39-q599 gsd-2019-18818 https://cve.radiocsirt.org/vuln/gsd-2019-18818 gsd-2019-18818 https://cve.radiocsirt.org/vuln/gsd-2019-18818