@oneuptime/common vulnerabilities (npm)
11 vulnerabilities.
-
@oneuptime/commonnpm OneUptime has WhatsApp Resend Verification Authorization Bypass 5.3 Medium -
@oneuptime/commonnpm OneUptime Synthetic Monitor RCE via exposed Playwright browser object 10.0 Critical -
@oneuptime/commonnpm OneUptime has authorization bypass via client‑controlled is-multi-tenant-query header 10.0 Critical -
@oneuptime/commonnpm OneUptime has broken access control in GitHub App installation flow that allows unauthorized project binding 8.6 High -
@oneuptime/commonnpm OneUptime Synthetic Monitor RCE via exposed Playwright browser object 10.0 Critical -
@oneuptime/commonnpm OneUptime Affected by Unsandboxed Code Execution in Probe Allows Any Project Member to Achieve RCE 10.0 Critical -
@oneuptime/commonnpm OneUptime has WebAuthn 2FA bypass: server accepts client-supplied challenge instead of server-stored value, allowing credential replay 8.2 High -
@oneuptime/commonnpm OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec() 10.0 Critical -
@oneuptime/commonnpm OneUptime: node:vm sandbox escape in probe allows any project member to achieve RCE 10.0 Critical -
@oneuptime/commonnpm OneUptime Unauthorized User Creation via API 8.8 High -
@oneuptime/commonnpm OneUptime is Vulnerable to Privilege Escalation via Login Response Manipulation 6.9 Medium