Vulnerabilities

TI-2026-52880 CVE-2026-75517

Novu: Cross-Environment Integration Manipulation (IDOR)

LOW 30

Novu provides an API for sending notifications through multiple channels.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.007 Published 2026-09-22 Fixed in 3.18.0 CWE-639

TI-2026-52876 CVE-2026-75511

LOW 24

Novu provides an API for sending notifications through multiple channels.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00465 Published 2026-09-22 Fixed in 3.18.0 CWE-918

TI-2023-18009 CVE-2023-35948

LOW 27

Novu provides an API for sending notifications through multiple channels.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00393 Published 2023-07-06 Fixed in 0.16.0 CWE-601