GHSA-w5rq-g9r6-vrcg: @dapperduckling/keycloak-connector-server has Reflected XSS Vulnerability in Authentication Flow URL Handling

GHSA-q4xm-6fjc-5f6w: sigstore-java has vulnerability with bundle verification

Strapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses.

**Strapi mishandles hidden attributes within admin API responses**

Moderate severity GitHub Reviewed Published Sep 28, 2022 • Updated Sep 30, 2022