Skip to content
OpenAdvisories

Package · npm

oneuptime

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-32598

    OneUptime: Password Reset Token Logged at INFO Level

    OneUptime is a solution for monitoring and managing online services. Prior to 10.0.24, the password reset flow logs the complete password reset URL — containing the plaintext reset token — at INFO log level, which is enabled by default in production. Anyone w…

    OneUptime oneuptime oneuptime npm