ON
Product
onyx
by onyx-dot-app · last CVE Sep 4, 2026
5
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 4Low 0
Watch

Add onyx to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-71424
9.6
0%
Aug 17
Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers
Affected: < 3.1.10; >= 3.2.0, < 3.2.14; >= 3.3.0-beta.0, < 4.0.0
Showing 1