Products: 1
Vulnerabilities: 37
Known Exploited: 0
5
Critical Level Threats
10
High Level Threats
18
Medium Level Threats
4
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-40896
OpenProject has Cross-Project Meeting Agenda Item Injection via Unscoped Section Lookup
Last Modified: Apr 23, 2026
Published: Apr 20, 2026
CVE-2026-33667
OpenProject: 2FA OTP Verification Missing Rate Limiting
Last Modified: Apr 28, 2026
Published: Apr 15, 2026
CVE-2026-34717
OpenProject: SQL Injection in Cost Reporting =n Operator via parse_number_string
Last Modified: Apr 21, 2026
Published: Apr 02, 2026
CVE-2026-32703
OpenProject's repository files are served with the MIME type allowing them to be used to bypass Content Security Policy
Last Modified: Mar 25, 2026
Published: Mar 18, 2026
CVE-2026-32698
OpenProject has a SQL Injection via Custom Field Name that can be chained to Remote Code Execution
Last Modified: Mar 25, 2026
Published: Mar 18, 2026
Items Per Page
