OneUptime
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 25, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OneUptime 14.0.2 before 14.0.69 Incorrect Authorization in Kubernetes AI Actions
OneUptime: RCE due to Node.js' vm module escape via error objects and infinite recursion
OneUptime: Unauthenticated Workflow Execution via ManualAPI
OneUptime SSO: Multi-Assertion Identity Injection via Decoupled Signature Verification
OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposure
OneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe
OneUptime: Password Reset Token Logged at INFO Level
OneUptime: Stored XSS via Mermaid Diagram Rendering (securityLevel: "loose")
OneUptime ClickHouse SQL Injection via Aggregate Query Parameters
OneUptime: Path Traversal — Arbitrary File Read (No Auth)
Monitor OneUptime in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.