npm - OSV

GHSA-3xcq-8mjw-h6mx

npm/@strapi/content-type-builder
npm/@strapi/plugin-content-type-builder

Strapi Vulnerable to SQL Injection in Content Type Builder 13 May

Fix available
Severity - 9.3 (Critical)

MAL-2025-33016

npm/set-content-type

Malicious code in set-content-type (npm) 14 Aug 2025

No fix available

GHSA-4p55-xj37-fx7g

npm/strapi-plugin-content-type-builder

Improper Authorization in Strapi 29 Oct 2020

Fix available
Severity - 7.5 (High)