twentyhq vulnerabilities

Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL

twentyhq · twenty

Twenty: Field-level read bypass

twentyhq · twenty

Twenty before 2.35.0 Permission Bypass via groupBy-with-records Query

twentyhq · twenty

Twenty Open Redirect via OAuth Propagator Callback

twentyhq · twenty

Twenty: SQL Injection in the `searchVector` Field Settings Allows Arbitrary PostgreSQL Execution

twentyhq · twenty

Twenty: Cross-workspace IDOR in AgentTurnResolver

twentyhq · twenty

Twenty: SQL Injection via the timeZone field

twentyhq · twenty

Twenty: Stored Cross-Site Scripting via Unsanitized File Serving (Missing Content-Type/Content-Disposition Headers)

twentyhq · twenty

twenty-server SSRF protection bypass via IPv4-mapped IPv6 address normalization

twentyhq · twenty

Twenty: Stored XSS via BlockNote FileBlock

twentyhq · twenty