Privilege Escalation

@oneuptime/common is vulnerable to privilege escalation. The vulnerability is due to improper validation of the isMasterAdmin parameter in the login response, which allows an attacker to manipulate its value and gain unauthorized access to the admin dashboard...

SQL Injection

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

Insertion of Sensitive Information into Log File

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

SQL Injection

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

Exposed Dangerous Method or Function

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

Missing Authorization

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

@oneuptime/common-server (>=7.0.141, <=7.0.2118), @oneuptime/common-ui (>=7.0.141, <=7.0.2936) +2 more potentially affected by CVE-2026-30887 via @oneuptime/common (>=7.0.141, <=7.0.2936)

@oneuptime/common NPM version =7.0.141, =7.0.141, =7.0.141, =7.0.141, =7.0.141, =7.0.2928 Source cves: CVE-2026-30887 Source advisory: MEND:CVE-2026-30887...

Missing Authorization

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

Exposed Dangerous Method or Function

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

Arbitrary Code Injection

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

Incorrect Authorization

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

Incorrect Authorization

Overview @oneuptime/common is a The OneUptime Common UI Library is a collection of shared components, utilities that are used across the OneUptime platform. It is designed to be easy to install and use, and to be extensible. This library is built with React and TypeScript. It includes c Affected...

@oneuptime/infrastructure-agent (>=7.0.141, <=7.0.1769) potentially affected by CVE-2024-29194 via @oneuptime/common-server (>=7.0.141, <=7.0.1769)

@oneuptime/common-server NPM version =7.0.141, =7.0.141, =7.0.1769 Source cves: CVE-2024-29194 Source advisory: GHSA-246P-XMG8-WMCQ...

@oneuptime/infrastructure-agent (>=7.0.141, <=7.0.1769) potentially affected by CVE-2024-29194 via @oneuptime/common-server (>=7.0.141, <=7.0.1769)

@oneuptime/common-server NPM version =7.0.141, =7.0.141, =7.0.1769 Source cves: CVE-2024-29194 Source advisory: OSV:GHSA-246P-XMG8-WMCQ...

@oneuptime/common-server (>=7.0.141, <=7.0.1814), @oneuptime/common-ui (>=7.0.141, <=7.0.1814) +1 more potentially affected by CVE-2024-29194 via @oneuptime/model (>=7.0.141, <=7.0.1814)

@oneuptime/model NPM version =7.0.141, =7.0.141, =7.0.141, =7.0.141, =7.0.1769 Source cves: CVE-2024-29194 Source advisory: OSV:GHSA-246P-XMG8-WMCQ...

@oneuptime/common-server (>=7.0.141, <=7.0.1814), @oneuptime/common-ui (>=7.0.141, <=7.0.1814) +1 more potentially affected by CVE-2024-29194 via @oneuptime/model (>=7.0.141, <=7.0.1814)

@oneuptime/model NPM version =7.0.141, =7.0.141, =7.0.141, =7.0.141, =7.0.1769 Source cves: CVE-2024-29194 Source advisory: GHSA-246P-XMG8-WMCQ...

@oneuptime/common-server (>=7.0.141, <=7.0.1814), @oneuptime/common-ui (>=7.0.141, <=7.0.1814) +1 more potentially affected by CVE-2024-29194 via @oneuptime/model (>=7.0.141, <=7.0.1814)

@oneuptime/model NPM version =7.0.141, =7.0.141, =7.0.141, =7.0.141, =7.0.1769 Source cves: CVE-2024-29194 Source advisory: MEND:CVE-2024-29194...

@oneuptime/infrastructure-agent (>=7.0.141, <=7.0.1769) potentially affected by CVE-2024-29194 via @oneuptime/common-server (>=7.0.141, <=7.0.1769)

@oneuptime/common-server NPM version =7.0.141, =7.0.141, =7.0.1769 Source cves: CVE-2024-29194 Source advisory: MEND:CVE-2024-29194...