What’s Vulnerable › Products

novuhq novu vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your novuhq novu version is affected

Latest novuhq novu vulnerabilities

• CVE-2026-75517 — Novu: Cross-Environment Integration Manipulation (IDOR) (CVSS 6.5)
• CVE-2026-75511 — Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs (CVSS 5.3)
• CVE-2026-75510 — Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme (CVSS 5.1)
• CVE-2023-35948 — Novu Open Redirect Vulnerability in Sign-In with GitHub Functionality (CVSS 6.1)