novuhq

Products

ProductCVEsExploitedLatest
novu4–Sep 22, 2026

Exploited and recent CVEs

  • CVE-2026-75517 Medium 6.5 Novu: Cross-Environment Integration Manipulation (IDOR) 0.7%
  • CVE-2026-75511 Medium 5.3 Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs 0.5%
  • CVE-2026-75510 Medium 5.1 Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme 0.5%
  • CVE-2023-35948 Medium 5.4 Novu Open Redirect Vulnerability in Sign-In with GitHub Functionality 0.4%