CVE-2026-32306
1 advisory.
npm/oneuptime CVE-2026-32306: critical 9.9
OneUptime ClickHouse SQL Injection via Aggregate Query Parameters
Action: Upgrade oneuptime to 10.0.23 or later.
npm i oneuptime@10.0.23Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.0.23 | - |
Fixed versions
| 10.0.23 |
Sources
- osv: GHSA-p5g2-jm85-8g35
- https://github.com/OneUptime/oneuptime/security/advisories/GHSA-p5g2-jm85-8g35
- https://nvd.nist.gov/vuln/detail/CVE-2026-32306
- https://github.com/OneUptime/oneuptime
- https://github.com/OneUptime/oneuptime/releases/tag/10.0.23
CVE-2026-32306 · published · modified · JSON