Skip to content
OpenAdvisories

Vendor

onlook

1 known vulnerabilities.

Products

repo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-65013 Public exploit

    Onlook tRPC Insecure Direct Object Reference via multiple procedures

    Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulnerability that allows authenticated attackers to access and manipulate other users' resources by supplying arbitrary UUID values to tRPC API procedures including …

    onlook repo