oneuptime vulnerabilities (npm)

5 vulnerabilities.

• oneuptime npm OneUptime: WhatsApp Webhook Missing Signature Verification CVE-2026-33143 Fix available 8.7 HighMarch 18, 2026
• oneuptime npm OneUptime: ClickHouse SQL Injection via unvalidated column identifiers in sort, select, and groupBy parameters CVE-2026-33142 Fix available 8.1 HighMarch 18, 2026
• oneuptime npm OneUptime: Password Reset Token Logged at INFO Level CVE-2026-32598 Fix available 6.9 MediumMarch 12, 2026
• oneuptime npm OneUptime: Stored XSS via Mermaid Diagram Rendering (securityLevel: "loose") CVE-2026-32308 Fix available 7.6 HighMarch 12, 2026
• oneuptime npm OneUptime ClickHouse SQL Injection via Aggregate Query Parameters CVE-2026-32306 Fix available 10.0 CriticalMarch 12, 2026