novuhq novu

• CVE-2026-75517 Medium 6.5 Novu: Cross-Environment Integration Manipulation (IDOR) 0.7%
• CVE-2026-75511 Medium 5.3 Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs 0.5%
• CVE-2026-75510 Medium 5.1 Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme 0.5%
• CVE-2023-35948 Medium 5.4 Novu Open Redirect Vulnerability in Sign-In with GitHub Functionality 0.4%