EUVD-2026-84538

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use cases including remove-integration, update-integration, auto-configure-integration, and set-integration-as-primary look up an integration by integrationId and organizationId...

PT-2026-96822

Name of the Vulnerable Software and Affected Versions Novu versions prior to 3.18.0 Description Novu provides an API for sending notifications through multiple channels. Certain integration mutation use cases fail to consistently enforce the environmentId when looking up an integration by...

CVE-2026-13210

GitLab CE/EE is affected by an improper input validation flaw in the environment scope pattern matcher for CI/CD variables. An authenticated user could access CI/CD variables outside their intended environment scope under certain conditions. The issue affects versions from 15.7 before 19.1.8 , 19...

CVE-2018-9039: Missing Authorization

In Octopus Deploy 2.0 and later before 2018.3.7, an authenticated user, with variable edit permissions, can scope some variables to targets greater than their permissions should allow. In other words, they can see machines beyond their team's scoped environments...