Skip to content
OpenAdvisories

Vendor

@novu

3 known vulnerabilities.

Products

api-service 2 application-generic 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-125115

    Novu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition

    Novu provides an API for sending notifications through multiple channels. Prior to 3.17.0, validateUrlSsrf in libs/application-generic/src/utils/ssrf-url-validation.ts uses the isPrivateIp deny-list without covering the RFC6598 100.64.0.0/10 shared address sp…

    novuhq @novu novu application-generic
  • Medium 6.5
    CVE-2026-75517

    Novu: Cross-Environment Integration Manipulation (IDOR)

    Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use cases including remove-integration, update-integration, auto-configure-integration, and set-integration-as-primary look up an integration …

    novuhq @novu novu api-service
  • Medium 5.3
    CVE-2026-75511

    Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs

    Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URLs from subscriber credentials.webhookUrl, channel endpoint endpoint.url, event payload.webhookUrl, and event overrides.webhookUrl, then pas…

    novuhq @novu novu api-service