Privilege Escalation

@oneuptime/common is vulnerable to privilege escalation. The vulnerability is due to improper validation of the isMasterAdmin parameter in the login response, which allows an attacker to manipulate its value and gain unauthorized access to the admin dashboard...

@oneuptime/cli (>=10.0.5, <=10.0.34), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-33396 via @oneuptime/common (>=7.0.141, <=10.0.34)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-33396 Source advisory: MEND:CVE-2026-33396...

@oneuptime/cli (>=10.0.23, <=10.0.33) potentially affected by CVE-2026-33143 via @oneuptime/common (>=10.0.23, <=10.0.33)

@oneuptime/common NPM version =10.0.23, =10.0.23, =10.0.33 Source cves: CVE-2026-33143 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15842853...

SQL Injection

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

@oneuptime/cli (>=10.0.5, <=10.0.33) potentially affected by CVE-2026-33142 via @oneuptime/common (>=10.0.5, <=10.0.33)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.33 Source cves: CVE-2026-33142 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15842854...

Insertion of Sensitive Information into Log File

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

@oneuptime/cli (>=10.0.5, <=10.0.23) potentially affected by CVE-2026-32598 via @oneuptime/common (>=10.0.5, <=10.0.23)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.23 Source cves: CVE-2026-32598 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15669612...

@oneuptime/cli (>=10.0.5, <=10.0.22) potentially affected by CVE-2026-32308 via @oneuptime/common (>=10.0.5, <=10.0.22)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.22 Source cves: CVE-2026-32308 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15669623...

SQL Injection

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

@oneuptime/cli (>=10.0.5, <=10.0.22) potentially affected by CVE-2026-32306 via @oneuptime/common (>=10.0.5, <=10.0.22)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.22 Source cves: CVE-2026-32306 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15669899...

@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30959 via @oneuptime/common (>=7.0.141, <=10.0.20)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30959 Source advisory: MEND:CVE-2026-30959...

@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30958 via @oneuptime/common (>=7.0.141, <=10.0.20)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30958 Source advisory: MEND:CVE-2026-30958...

@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30957 via @oneuptime/common (>=7.0.141, <=10.0.20)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30957 Source advisory: MEND:CVE-2026-30957...

@oneuptime/cli (>=10.0.5, <=10.0.20), @oneuptime/common-server (>=7.0.141, <=7.0.2936) +4 more potentially affected by CVE-2026-30956 via @oneuptime/common (>=7.0.141, <=10.0.20)

@oneuptime/common NPM version =7.0.141, =10.0.5, =7.0.141, =7.0.141, =7.0.141, =7.0.4774, =7.0.141, =7.0.2928 Source cves: CVE-2026-30956 Source advisory: MEND:CVE-2026-30956...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: OSV:GHSA-CW6X-MW64-Q6PV...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469597...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30959 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30959 Source advisory: GHSA-CW6X-MW64-Q6PV...

@oneuptime/cli (>=10.0.15, <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.15, <=10.0.20)

@oneuptime/common NPM version =10.0.15, =10.0.15, =10.0.20 Source cves: CVE-2026-30957 Source advisory: SNYK:JS-ONEUPTIMECOMMON-15469296...

Exposed Dangerous Method or Function

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

@oneuptime/cli (>=10.0.5, <=10.0.20) potentially affected by CVE-2026-30957 via @oneuptime/common (>=10.0.5, <=10.0.20)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.20 Source cves: CVE-2026-30957 Source advisory: OSV:GHSA-JW8Q-GJVG-8W4Q...