Products: 2
    Vulnerabilities: 11
    Known Exploited: 0
    3
    Critical Level Threats
    3
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-82274

    Twenty Open Redirect via OAuth Propagator Callback

    Last Modified: Aug 28, 2026
    Published: Aug 28, 2026

    CVE-2026-73069

    Twenty: SQL Injection in the `searchVector` Field Settings Allows Arbitrary PostgreSQL Execution

    Last Modified: Aug 13, 2026
    Published: Aug 11, 2026

    CVE-2026-55583

    Twenty: Cross-workspace IDOR in AgentTurnResolver

    Last Modified: Jun 25, 2026
    Published: Jun 24, 2026

    CVE-2026-46624

    Twenty: SQL Injection via the timeZone field

    Last Modified: May 27, 2026
    Published: May 26, 2026

    CVE-2026-44729

    Twenty: Stored Cross-Site Scripting via Unsanitized File Serving (Missing Content-Type/Content-Disposition Headers)

    Last Modified: May 27, 2026
    Published: May 26, 2026
    Items Per Page