Vulnerabilities in OneSignal

3 results

CVE-2023-28430HIGHOneSignal repository github action command injectionEPSS 0.9%CVE-2026-3155LOWOneSignal – Web Push Notifications <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Post Meta Deletion via 'post_id'EPSS 0.3%CVE-2025-13950MEDIUMOneSignal – Web Push Notifications <= 3.6.1 - Missing Authorization to Unauthenticated Plugin Settings UpdateEPSS 0.3%