Vulnerabilities in OneUptime

26 results
CVE-2026-32598MEDIUMOneUptime: Password Reset Token Logged at INFO LevelEPSS 0.3%CVE-2026-45102CRITICALOneUptime: RCE due to Node.js' vm module escape via error objects and infinite recursionEPSS 0.3%CVE-2026-32308HIGHOneUptime: Stored XSS via Mermaid Diagram Rendering (securityLevel: "loose")EPSS 0.3%CVE-2026-30920HIGHOneUptime has broken access control in GitHub App installation flow that allows unauthorized project bindingEPSS 0.2%CVE-2026-33143HIGHOneUptime: WhatsApp Webhook Missing Signature VerificationEPSS 0.2%CVE-2026-112047MEDIUMOneUptime 14.0.2 before 14.0.69 Incorrect Authorization in Kubernetes AI ActionsEPSS 0.2%