Skip to content
OpenAdvisories

Vendor

opencve

2 known vulnerabilities.

Products

opencve 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-62282

    OpenCVE: Server-Side Request Forgery (SSRF) in notifications

    OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack integrations does not sufficiently validate user-supplied HTTP or HTTPS destinations. An authenticated user with permission to configure notif…

    opencve opencve opencve PyPI
  • Medium 4.3
    CVE-2026-92764

    OpenCVE 2.4.0 < 3.1.0 Organization API Ignores Token Scope

    OpenCVE versions 2.4.0 before 3.1.0 fails to properly scope the organizations API endpoint to the token's organization, instead returning the token creator's memberships. Attackers with organization-scoped tokens can list and retrieve every organization their…

    opencve opencve