openreplay vulnerabilities
8 published CVEs name openreplay among the affected products.
- 8Published CVEs8 of them scored
- 7Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-57230
OpenReplay: Authenticated ClickHouse SQL injection via session search
openreplay · openreplay
Medium5.4 - CVE-2026-55881
OpenReplay: Cross-tenant session replay disclosure via missing session ownership check in first-mob endpoint
openreplay · openreplay
High7.1 - CVE-2026-55880
OpenReplay: Cross-user IDOR in notes and dashboard widgets
openreplay · openreplay
High7.1 - CVE-2026-55879
OpenReplay: Unauthenticated stored XSS leads to dashboard account takeover
openreplay · openreplay
Critical9.3 - CVE-2026-45296
OpenReplay: Cross-tenant information disclosure in app_apikey projectKey routes via missing tenant binding
openreplay · openreplay
High7.7 - CVE-2026-45297
Cross-tenant IDOR on feature-flag and assist-stats routes via {project_id} case mismatch
openreplay · openreplay
Medium5.3 - CVE-2026-28443
OpenReplay: SQL injection in cards/search via unvalidated sort field parameter
openreplay · openreplay
Medium6.9 - CVE-2023-48226
OpenReplay HTML Injection vulnerability
openreplay · openreplay
Medium6.5