Vulnerabilities in Openpanel-dev

32 results
CVE-2026-85610HIGHOpenPanel before 2.3.0 Remote Code Execution via chart formulasEPSS 0.7%CVE-2026-93985CRITICALOpenPanel js-runtime through 2.3.0 JavaScript Template Sandbox Escape RCEEPSS 0.7%CVE-2026-116817MEDIUMOpenPanel before 3.0.0 Missing Authentication on Worker Bull BoardEPSS 0.6%CVE-2026-85609MEDIUMOpenpanel before 2.3.0 SSRF via Site Checker EndpointEPSS 0.5%CVE-2026-116811HIGHOpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript TemplateEPSS 0.5%CVE-2026-88893HIGHOpenPanel through 2.3.0 Unauthenticated Share Lookup Information DisclosureEPSS 0.5%CVE-2026-88891HIGHOpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via MutationsEPSS 0.4%CVE-2026-116818HIGHOpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocketEPSS 0.4%CVE-2026-93984MEDIUMOpenPanel API through 2.3.0 Authentication Bypass via Unverified Client SecretEPSS 0.4%CVE-2026-77768HIGHOpenPanel report.get Returns Any Report by Identifier Without Checking Project AccessEPSS 0.4%CVE-2026-77769HIGHOpenPanel report.list Queries Reports by an Unverified dashboardId, Crossing Organization BoundariesEPSS 0.4%CVE-2026-85612HIGHOpenPanel before 2.3.0 SSRF via favicon and og endpointsEPSS 0.4%CVE-2026-85613HIGHOpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon ProxyEPSS 0.4%CVE-2026-88890HIGHOpenPanel through 2.3.0 SQL Injection via unvalidated profile filter column identifierEPSS 0.4%CVE-2026-116808HIGHOpenPanel before 3.0.0 ClickHouse SQL Injection via profile.valuesEPSS 0.4%CVE-2026-93983MEDIUMOpenPanel through 2.3.0 SQL Injection via ClickHouse Property Key FilterEPSS 0.3%CVE-2026-88892MEDIUMOpenPanel through 2.3.0 SSRF via Unguarded Importer File URL FetchEPSS 0.3%CVE-2026-116819HIGHOpenPanel before 3.0.0 Credential Disclosure via notification.rules QueryEPSS 0.3%CVE-2026-116814HIGHOpenPanel before 3.0.0 Sensitive Information Exposure via Application LogsEPSS 0.3%CVE-2026-116807HIGHOpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC QueryEPSS 0.3%