@novu/api

1 known vulnerability · 0 critical · 0 high

GHSA-4x48-cgf9-q33f

Novu has SSRF via conditions filter webhook bypasses validateUrlSsrf() protection

Published Apr 14, 2026

Check your entire dependency tree at onceRun dependency scan →