Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-34758
9.1
CRITICALCVSS v3
Published
April 2, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42.
GitHub