Omnivore-App Omnivore
2 CVEs affecting Omnivore-App Omnivore. Latest disclosed: 2026-08-29. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82454 | Critical | 9.1 | 2026-08-29 | The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken fu… |
CVE-2026-77067 | Medium | 5.0 | 2026-08-20 | The setWebhookResolver in packages/api/src/resolvers/webhooks/index.ts stores the caller-supplied url without any address validation, and the file imports no v… |