Skip to content
OpenAdvisories

Vendor

novuhq

6 known vulnerabilities.

Products

novu 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-125114

    Novu: SSRF via conditions filter webhook bypasses validateUrlSsrf() protection

    Novu provides an API for sending notifications through multiple channels. Prior to 3.15.0, the conditions filter webhook in libs/application-generic/src/usecases/conditions-filter/conditions-filter.usecase.ts passes the user-configured child.webhookUrl direct…

    novuhq novu