openwhyd

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

openwhyd records in CISA KEV

No openwhyd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openwhyd 2 records LOW

Records

3 records

TI-2026-85955 CVE-2026-123617 · GHSA-224m-3wgx-rg59

NoSQL injection in Openwhyd user lookup exposes user profiles

HIGH 70

Openwhyd before 1.65.1 contains a NoSQL injection vulnerability that allows unauthenticated attackers to manipulate user lookups by passing JSON objects in the id parameter.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00403 Published 2026-11-06 Fixed in 1.65.1 CWE-943

TI-2021-02760 CVE-2021-3829 · GHSA-fh7r-crx5-gjvh

Open Redirect in openwhyd/openwhyd

LOW 29

openwhyd is vulnerable to URL Redirection to Untrusted Site

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00864 Published 2021-12-10 Fixed in 1.45.3 CWE-601

TI-2021-02768 CVE-2021-3837

Improper Authorization in openwhyd/openwhyd

LOW 28

openwhyd is vulnerable to Improper Authorization

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00539 Published 2022-01-03 Fixed in 1.45.12 CWE-285

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0