@novu
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| api-service | 2 | – | Sep 22, 2026 |
Exploited and recent CVEs
- CVE-2026-75517 Novu: Cross-Environment Integration Manipulation (IDOR) 0.7%
- CVE-2026-75511 Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs 0.5%