[ Vendor · 1 CVEs ]
novuhq
CVEs affecting novuhq published in the last 30 days, plus any novuhq CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-75510 | 22 Sep 2026 | CVSS 5.1 | Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: schemeNovu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu's @novu/js In-App Inbox and the @novu/react Inbox… | Fix |