strapi-plugin-protected-populate@1.3.1 vulnerabilities

Protects your populates from the url against bad actors.

  • latest version

    2.0.1

  • latest non vulnerable version

  • first published

    2 years ago

  • latest version published

    25 days ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the strapi-plugin-protected-populate package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Incorrect Authorization

    strapi-plugin-protected-populate is a Protects your populates from the url against bad actors.

    Affected versions of this package are vulnerable to Incorrect Authorization due to the improper handling of field-level security. Attackers can populate fields they are not authorized to access.

    How to fix Incorrect Authorization?

    Upgrade strapi-plugin-protected-populate to version 1.3.4 or higher.

    <1.3.4