novuhq vulnerabilities
6 published CVEs name novuhq among the affected products.
- 6Published CVEs6 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-125115
Novu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition
novuhq · novu
Medium6.8 - CVE-2026-125114
Novu: SSRF via conditions filter webhook bypasses validateUrlSsrf() protection
novuhq · novu
High8.3 - CVE-2026-75517
Novu: Cross-Environment Integration Manipulation (IDOR)
novuhq · novu
Medium6.5 - CVE-2026-75511
Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs
novuhq · novu
Medium5.3 - CVE-2026-75510
Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme
novuhq · novu
Medium5.1 - CVE-2023-35948
Novu Open Redirect Vulnerability in Sign-In with GitHub Functionality
novuhq · novu
Medium5.4