CyberSecBulletin

Novuhq vulnerabilities

We track 1 vulnerability in Novuhq products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.

1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score

Latest Novuhq vulnerabilities

  • 8.3 High severity

    novu: Server-Side Request Forgery

    CVE-2026-125114Novuhq

    Novu provides an API for sending notifications through multiple channels. Prior to 3.15.0, the conditions filter webhook in libs/application-generic/src/usecases/conditions-filter/conditions-filter.usecase.ts passes the user-configured child.webhookUrl directl