openstatusHQ vulnerabilities

Products

• openstatus 2

Latest openstatusHQ CVEs

Newest publication first

1. CVE-2026-90486 openstatusHQ openstatus resolve-custom-domain-rewrite.ts server-side request forgery

   Published 2026-09-12

   Medium·CVSS 5.3 EPSS 0.40%

   A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown functionality of the file apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.ts. The manipulation leads to server-side...

2. CVE-2026-5808 openstatusHQ openstatus Onboarding Endpoint client.tsx cross site scripting

   Published 2026-04-08

   Medium·CVSS 5.3 EPSS 0.29%

   A vulnerability was detected in openstatusHQ openstatus up to 1b678e71a85961ae319cbb214a8eae634059330c. This impacts an unknown function of the file apps/dashboard/src/app/(dashboard)/onboarding/client.tsx of the component Onboarding Endpoint. The manipulation of the argument cal...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.