Novuhq Novu vulnerabilities
- novuhq novu, @novu api-service +1 moreNovu: Cross-Environment Integration Manipulation (IDOR)6.5 Medium
- novuhq novu, @novu api-service +1 moreNovu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs5.3 Medium
- novuhq novuNovu: Stored XSS in In-App Inbox via notification redirect.url javascript: scheme5.1 Medium
- @novu application-generic, novuhq novu +1 moreNovu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition6.8 Medium
- novuhq novuNovu: SSRF via conditions filter webhook bypasses validateUrlSsrf() protection8.3 High
- novuNovu Open Redirect Vulnerability in Sign-In with GitHub Functionality5.4 Medium