What is GHSA-hqgm-4px4-m8x2?

GHSA-hqgm-4px4-m8x2 is a security advisory published by GitHub Security Advisories with unknown severity. The strapi/content-manager package is missing content-scope authorization in the content manager...

Which CVE IDs does GHSA-hqgm-4px4-m8x2 cover?

GHSA-hqgm-4px4-m8x2 covers the following CVE IDs: CVE-2026-118171. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-hqgm-4px4-m8x2unknown

The strapi/content-manager package is missing content-scope authorization in the content manager...

Vendor

GitHub Security Advisories

Published

October 27, 2026

Last Modified

October 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-118171 →

📋 Description

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-118171
https://github.com/strapi/strapi/releases#release-v5.51.0
https://github.com/advisories/GHSA-hqgm-4px4-m8x2