@novu/application-generic vulnerabilities (npm)

1 vulnerability.

• @novu/application-generic npm Novu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition CVE-2026-125115 Fix available 6.8 MediumJuly 28, 2026