Twentyhq vulnerabilities

Products

• Twenty 12

Newest

• twentyhq twenty Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL CVE-2026-105763 9.6 CriticalOctober 5, 2026
• twentyhq twenty Twenty: Field-level read bypass CVE-2026-85055 7.1 HighSeptember 22, 2026
• twentyhq twenty Twenty before 2.35.0 Permission Bypass via groupBy-with-records Query CVE-2026-92771 7.1 HighSeptember 16, 2026
• twentyhq twenty Twenty Open Redirect via OAuth Propagator Callback CVE-2026-82274 5.3 MediumAugust 28, 2026
• twentyhq twenty Twenty: SQL Injection in the `searchVector` Field Settings Allows Arbitrary PostgreSQL Execution CVE-2026-73069 9.1 CriticalAugust 11, 2026
• twentyhq twenty Twenty: Cross-workspace IDOR in AgentTurnResolver CVE-2026-55583 7.6 HighJune 24, 2026
• twenty Twenty: SQL Injection via the timeZone field CVE-2026-46624 9.9 CriticalMay 26, 2026
• twenty Twenty: Stored Cross-Site Scripting via Unsanitized File Serving (Missing Content-Type/Content-Disposition Headers) CVE-2026-44729 8.7 HighMay 26, 2026
• twentyhq twenty twenty-server SSRF protection bypass via IPv4-mapped IPv6 address normalization CVE-2026-33975 8.3 HighMay 5, 2026
• twentyhq twenty Twenty: Stored XSS via BlockNote FileBlock CVE-2026-35451 5.7 MediumApril 21, 2026
• twenty Twenty: SSRF protection bypass via HTTP redirect following in secure HTTP client CVE-2026-27023 5.0 MediumMarch 5, 2026
• twenty The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload. CVE-2024-28435 5.4 MediumMarch 25, 2024