Skip to content
OpenAdvisories

Package · npm

@oneuptime/common

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-30959

    OneUptime has WhatsApp Resend Verification Authorization Bypass

    OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a verification code resend for any UserWhatsApp record by ID. Ownership is not validated (unlike the verify end…

    OneUptime oneuptime @oneuptime/common npm
  • Medium 6.9
    CVE-2025-66028

    OneUptime is Vulnerable to Privilege Escalation via Login Response Manipulation

    OneUptime is a solution for monitoring and managing online services. Prior to version 8.0.5567, OneUptime is vulnerable to privilege escalation via Login Response Manipulation. During the login process, the server response included a parameter called isMaster…

    OneUptime oneuptime @oneuptime/common npm