Openpanel-dev vulnerabilities

Newest CVEs

• CVE-2026-116819

  OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query

  Openpanel-dev · openpanel

  High8.4
• CVE-2026-116818

  OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket

  Openpanel-dev · openpanel

  High8.8
• CVE-2026-116817

  OpenPanel before 3.0.0 Missing Authentication on Worker Bull Board

  Openpanel-dev · openpanel

  Medium6.9
• CVE-2026-116815

  OpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.ts

  Openpanel-dev · openpanel

  Medium5.3
• CVE-2026-116814

  OpenPanel before 3.0.0 Sensitive Information Exposure via Application Logs

  Openpanel-dev · openpanel

  High7.1
• CVE-2026-116813

  OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts

  Openpanel-dev · openpanel

  High7.1
• CVE-2026-116812

  OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filter

  Openpanel-dev · openpanel

  High7.1
• CVE-2026-116811

  OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template

  Openpanel-dev · openpanel

  High8.7
• CVE-2026-116810

  OpenPanel before 3.0.0 Missing Authorization via reference.getChartReferences

  Openpanel-dev · openpanel

  Medium6.9
• CVE-2026-116809

  OpenPanel before 3.0.0 Missing Authorization in event.bots tRPC Procedure

  Openpanel-dev · openpanel

  Medium6.9