OP
Product
Openproject
by Openproject · last CVE Apr 20, 2026
37
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 12Medium 20Low 2
Watch

Add Openproject to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25764
3.5
0%
Feb 6
OpenProject vulnerable to Stored HTML injection
Affected: before 16.6.7; 17.0.0 before 17.0.3
CVE-2026-22602
3.5
0%
Jan 10
OpenProject is Vulnerable to User Enumeration via User ID
Affected: before 16.6.2
Showing 2