@novu/js vulnerabilities (npm)

1 vulnerability.

• @novu/js npm Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme CVE-2026-75510 Fix available 5.1 MediumSeptember 22, 2026