Vulnerabilities in novuhq

4 results

CVE-2026-75517MEDIUMNovu: Cross-Environment Integration Manipulation (IDOR)EPSS 0.7%CVE-2026-75510MEDIUMNovu: Stored XSS in In-App Inbox via notification redirect.url javascript: schemeEPSS 0.5%CVE-2026-75511MEDIUMNovu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLsEPSS 0.5%CVE-2023-35948MEDIUMNovu Open Redirect Vulnerability in Sign-In with GitHub FunctionalityEPSS 0.4%