Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

novuhq vulnerabilities

4 published CVEs name novuhq among the affected products.

All 4 in the listAtom feed of new CVEs
Published CVEs
4
Last 12 months
3
Critical
0
Known exploited
0

Critical 0High 0Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20263

Newest CVEs

  • CVE-2026-75517

    Novu: Cross-Environment Integration Manipulation (IDOR)

    novuhq · novu

    Medium6.5
  • CVE-2026-75511

    Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs

    novuhq · novu

    Medium5.3
  • CVE-2026-75510

    Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme

    novuhq · novu

    Medium5.1
  • CVE-2023-35948

    Novu Open Redirect Vulnerability in Sign-In with GitHub Functionality

    novuhq · novu

    Medium5.4

Products with the most CVEs

  1. novu4

Most common weaknesses

  1. CWE-601 Open redirect1
  2. CWE-639 Authorization bypass through a user-controlled key (IDOR)1
  3. CWE-79 Cross-site scripting (XSS)1
  4. CWE-918 Server-side request forgery (SSRF)1