Starstruk Logo MarkStarstruk

v4.26.2

JoshuaC215/agent-service-toolkitv4.26.2Jun 9, 2026by Bassel17

AI Summary

This is the final release of Strapi 4, serving as the End-Of-Life (EOL) version. It addresses a critical security vulnerability and adds Node.js 22 support.

Key Highlights

  • Final release for Strapi 4 (EOL as of April 30, 2026)
  • Critical security fix for relational filtering exposing sensitive data
  • Node.js 22 support added for Strapi v4
  • Upgraded tar dependency for security

New Features

  • Node.js 22 support
  • Critical security vulnerability fixes
  • Unique admin email validation enforcement

Full Release Notes

## :warning: Note: This is the final Strapi 4 release :warning: 

No further updates to Strapi 4 will be published, this release serves as the final version of Strapi 4 which is considered EOL (End-Of-Life) as of April 30th, 2026. All Strapi users should migrate to Strapi 5: https://docs.strapi.io/cms/migration/v4-to-v5/introduction-and-faq

Also please note, this does include Strapi Customers as well. Strapi Cloud will still continue to function with Strapi 4 but that may be subject change in the near future without warning.

## What's Changed

### Security
* Fixed a critical vulnerability where relational filtering could expose sensitive data through insufficient query sanitization. See [GHSA-rjg2-95x7-8qmx](https://github.com/strapi/strapi/security/advisories/GHSA-rjg2-95x7-8qmx) / CVE-2026-27886.
* Upgraded `tar` to v7 to address security warnings.
* Applied v4 dependency security and maintenance updates.

### Fixes
* Enforced unique admin email validation when updating the authenticated user profile.

### Compatibility
* Added Node.js 22 support for Strapi v4.

**Full Changelog**: https://github.com/strapi/strapi/compare/v4.26.1...v4.26.2