Browse CVEs

CRITICAL 9.8 CVE-2026-35053 OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, the Worker service's ManualAPI exposes workflow executio… Oneuptime 10.0.42+ Fix from $2,3002026-04-02 HIGH 8.1 CVE-2026-34840 OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, OneUptime's SAML SSO implementation (App/FeatureSet/Iden… Oneuptime 10.0.42+ Fix from $1,9502026-04-02 CRITICAL 9.1 CVE-2026-34758 OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Nu… Oneuptime 10.0.40+ Fix from $2,3002026-04-02 HIGH 8.1 CVE-2026-34759 OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, multiple notification API endpoints are registered witho… Oneuptime 10.0.42+ Fix from $1,9502026-04-02 CRITICAL 9.9 CVE-2026-33396 OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.35, a low-privileged authenticated user (ProjectMember) can … Oneuptime 10.0.35+ Fix from $2,3002026-03-26 HIGH 8.1 CVE-2026-33142 OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.34, the fix for CVE-2026-32306 (ClickHouse SQL injection v… Oneuptime 10.0.34+ Fix from $1,9502026-03-20 HIGH 7.5 CVE-2026-33143 OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.34, the WhatsApp POST webhook handler (/notification/whats… Oneuptime 10.0.34+ Fix from $1,9502026-03-20 MEDIUM 6.5 CVE-2026-32598 OneUptime is a solution for monitoring and managing online services. Prior to 10.0.24, the password reset flow logs the complete password reset URL —… Oneuptime 10.0.24+ Fix from $1,6002026-03-13 CRITICAL 9.9 CVE-2026-32306 OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the telemetry aggregation API accepts user-controlled aggregat… Oneuptime 10.0.23+ Fix from $2,3002026-03-13 HIGH 7.6 CVE-2026-32308 OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the Markdown viewer component renders Mermaid diagrams with se… Oneuptime 10.0.23+ Fix from $1,9502026-03-13 MEDIUM 5.0 CVE-2026-30959 OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a… Oneuptime 10.0.21+ Fix from $1,6002026-03-10 CRITICAL 9.9 CVE-2026-30956 OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, a low‑privileged user can bypass authorization and tenant isol… Oneuptime 10.0.21+ Fix from $2,3002026-03-10 CRITICAL 9.9 CVE-2026-30957 OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, OneUptime Synthetic Monitors allow a low-privileged authentica… Oneuptime 10.0.21+ Fix from $2,3002026-03-10 HIGH 8.6 CVE-2026-30958 OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, an unauthenticated path traversal in the /workflow/docs/:compo… Oneuptime 10.0.21+ Fix from $1,9502026-03-10 CRITICAL 9.9 CVE-2026-30921 OneUptime is a solution for monitoring and managing online services. Prior to 10.0.20, OneUptime Synthetic Monitors allow low-privileged project user… Oneuptime 10.0.20+ Fix from $2,3002026-03-10 HIGH 8.6 CVE-2026-30920 OneUptime is a solution for monitoring and managing online services. Prior to 10.0.19, OneUptime's GitHub App callback trusts attacker-controlled sta… Oneuptime 10.0.19+ Fix from $1,9502026-03-10 CRITICAL 9.9 CVE-2026-30887 OneUptime is a solution for monitoring and managing online services. Prior to 10.0.18, OneUptime allows project members to run custom Playwright/Java… Oneuptime 10.0.18+ Fix from $2,3002026-03-10 CRITICAL 9.0 CVE-2026-28787 OneUptime is a solution for monitoring and managing online services. In version 10.0.11 and prior, the WebAuthn authentication implementation does no… Oneuptime after 10.0.11 Fix from $2,3002026-03-06 HIGH 8.8 CVE-2026-27728 OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in `NetworkPathMo… Oneuptime 10.0.7+ Fix from $1,9502026-02-25 CRITICAL 9.9 CVE-2026-27574 OneUptime is a solution for monitoring and managing online services. In versions 9.5.13 and below, custom JavaScript monitor feature uses Node.js's n… Oneuptime 10.0.5+ Fix from $2,3002026-02-21 HIGH 8.2 CVE-2025-66028 OneUptime is a solution for monitoring and managing online services. Prior to version 8.0.5567, OneUptime is vulnerable to privilege escalation via L… Oneuptime 8.0.5567+ Fix from $1,9502025-11-26 HIGH 8.1 CVE-2025-65966 OneUptime is a solution for monitoring and managing online services. In version 9.0.5598, a low-permission user can create new accounts through a dir… Oneuptime No fix yet Fix from $1,9502025-11-26 HIGH 8.3 CVE-2024-29194 OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation of client-side stored data wit… Oneuptime 7.0.1815+ Fix from $1,9502024-03-24