@Novu

4 CVEs in 3 @Novu products, including Api-Service, Application-Generic, Novu. Newest: CVE-2026-125115 (2026-11-09).

@Novu products with known CVEs

ProductCVEs
Api-Service2
Application-Generic1
Novu1
@Novu CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-125115Medium6.82026-11-09Novu provides an API for sending notifications through multiple channels. Prior to 3.17.0, validateUrlSsrf in libs/application-generic/src/utils/ssrf-url-valid…
CVE-2026-75517Medium6.52026-09-22Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use cases including remove-integration, up…
CVE-2026-755112026-09-22Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URLs from subscriber credentials.webhookUr…
CVE-2023-35948Medium5.42023-07-06Novu provides an API for sending notifications through multiple channels. Versions prior to 0.16.0 contain an open redirect vulnerability in the "Sign In with…