novu vulnerabilities

1 known vulnerability in novu from Novuhq. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  novu: Server-Side Request Forgery

  CVE-2026-125114Nov 9, 2026Novuhq

  Novu provides an API for sending notifications through multiple channels. Prior to 3.15.0, the conditions filter webhook in libs/application-generic/src/usecases/conditions-filter/conditions-filter.usecase.ts passes the user-configured child.webhookUrl directl