v4.26.2 - Final Strapi 4 Release (EOL April 30, 2026)
This is the final release of Strapi 4, which reaches end-of-life on April 30th, 2026. It includes a critical security patch for relational filtering vulnerability (CVE-2026-27886), dependency updates, admin email validation enforcement, and Node.js 22 support. Users should migrate to Strapi 5.
⚠️ Note: This is the final Strapi 4 release ⚠️
No further updates to Strapi 4 will be published, this release serves as the final version of Strapi 4 which is considered EOL (End-Of-Life) as of April 30th, 2026. All Strapi users should migrate to Strapi 5: https://docs.strapi.io/cms/migration/v4-to-v5/introduction-and-faq
Also please note, this does include Strapi Customers as well. Strapi Cloud will still continue to function with Strapi 4 but that may be subject change in the near future without warning.
What's Changed
Security
- Fixed a critical vulnerability where relational filtering could expose sensitive data through insufficient query sanitization. See GHSA-rjg2-95x7-8qmx / CVE-2026-27886.
- Upgraded
tarto v7 to address security warnings. - Applied v4 dependency security and maintenance updates.
Fixes
- Enforced unique admin email validation when updating the authenticated user profile.
Compatibility
- Added Node.js 22 support for Strapi v4.
Full Changelog: v4.26.1...v4.26.2
Source: original entry ↗
More from Strapi
Follow Strapi to get its new changes in your feed and email digest.
v5.58.0 Release
Strapi 5.58.0 includes new audit logging for failed admin logins and SSO auto-registration, license details in the admin panel, and numerous bug fixes across content management, upload handling, and core services. Multiple dependency updates address security advisories in axios and handlebars.
v5.57.0 Release
Strapi 5.57.0 introduces new CLI enterprise install command, preserves data when renaming attributes, records workflow actions in audit logs, and fixes numerous bugs across admin, content manager, media library, and core components including performance improvements and security patches.
v5.56.0
Strapi 5.56.0 adds audit logging for admin account and password actions, improves webhook auditing, and fixes multiple bugs in content management and relations. This release also updates dependencies, enhances the upload module with custom AI provider support, and includes various UI and performance improvements.