Advisories · Technology

novu.

Every CVE that names novu among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75517 CVE record

CVSS 6.5 Medium

Novu: Cross-Environment Integration Manipulation (IDOR)
- novu
- @novu api-service
- Broken access control
Not analysed yet 22 Sept 2026
CVE-2026-75511 CVE record

CVSS 5.3 Medium

Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs
- novu
- @novu api-service
- Server-side request forgery (SSRF)
Not analysed yet 22 Sept 2026
CVE-2023-35948 CVE record

CVSS 5.4 Medium

Novu Open Redirect Vulnerability in Sign-In with GitHub Functionality
- novu
- Open redirect
Not analysed yet 6 Jul 2023