oneuptime
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| OneUptime WhatsApp Webhook Missing Signature Verification | oneuptime | npm | High | Fix reported | |
| OneUptime ClickHouse vulnerable to SQL Injection via unvalidated column identifiers in sort, select, and groupBy parameters | oneuptime | npm | High | Fix reported | |
| OneUptime: Password Reset Token Logged at INFO Level | oneuptime | npm | Medium | Fix reported | |
| OneUptime ClickHouse SQL Injection via Aggregate Query Parameters | oneuptime | npm | Critical | Fix reported | |
| OneUptime: Stored XSS via Mermaid Diagram Rendering (securityLevel: "loose") | oneuptime | npm | High | Fix reported |