What’s Vulnerable › Products

@novu api-service vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your @novu api-service version is affected

Latest @novu api-service vulnerabilities

• CVE-2026-75517 — Novu: Cross-Environment Integration Manipulation (IDOR) (CVSS 6.5)
• CVE-2026-75511 — Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs (CVSS 5.3)