onesignal vulnerabilities
3 published CVEs name onesignal among the affected products.
- 3Published CVEs3 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-3155
OneSignal – Web Push Notifications <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Post Meta Deletion via 'post_id'
onesignal · OneSignal – Web Push Notifications
Low3.1 - CVE-2025-13950
OneSignal – Web Push Notifications <= 3.6.1 - Missing Authorization to Unauthenticated Plugin Settings Update
onesignal · OneSignal – Web Push Notifications
Medium5.3 - CVE-2023-28430
OneSignal repository github action command injection
OneSignal · react-native-onesignal
High7.3