Products: 1
Vulnerabilities: 10
Known Exploited: 0
1
Critical Level Threats
1
High Level Threats
7
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-116004
onyx-dot-app Onyx PreviewTab.tsx cross site scripting
Last Modified: Oct 29, 2026
Published: Oct 25, 2026
CVE-2026-85700
Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints
Last Modified: Sep 04, 2026
Published: Sep 04, 2026
CVE-2026-63178
Onyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosure
Last Modified: Aug 21, 2026
Published: Aug 17, 2026
CVE-2026-71424
Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers
Last Modified: Aug 21, 2026
Published: Aug 17, 2026
CVE-2026-42277
Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files
Last Modified: May 12, 2026
Published: May 08, 2026
Items Per Page
