Lack of JWT Expiration after Log Out in Strapi

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-3930 · Microsoft / collected KEV context

EUVD-2025-34751

GHSA-4r8w-3jww-m2rp

cve-program · CVE-2025-3930

• https://cert.pl/en/posts/2025/06/CVE-2025-3930
• https://github.com/strapi/strapi
• https://strapi.io/
• https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve-October-2025

euvd · EUVD-2025-34751

• https://cert.pl/en/posts/2025/06/CVE-2025-3930
• https://github.com/strapi/strapi
• https://strapi.io/
• https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve-October-2025

nvd · CVE-2025-3930

• https://cert.pl/en/posts/2025/06/CVE-2025-3930
• https://github.com/strapi/strapi
• https://strapi.io/
• https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve-October-2025

osv · GHSA-4r8w-3jww-m2rp

• https://nvd.nist.gov/vuln/detail/CVE-2025-3930
• https://cert.pl/en/posts/2025/06/CVE-2025-3930
• https://github.com/strapi/strapi
• https://strapi.io/
• https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve-October-2025

No related operational record is retained in the current change model.