TW
Product
twenty
12
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 3High 4Medium 5Low 0
Watch
Add twenty to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-92771 | 6.5 | Sep 16 | Twenty before 2.35.0 Permission Bypass via groupBy-with-records Query Affected: before 2.35.0 |
| CVE-2026-35451 | 5.7 | Apr 21 | Twenty: Stored XSS via BlockNote FileBlock Affected: < 1.20.6 |
| CVE-2024-28435 | 5.4 | Mar 25 | The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload Affected: 0.3.0 |
| CVE-2026-27023 | 5.0 | Mar 5 | Twenty: SSRF protection bypass via HTTP redirect following in secure HTTP client Affected: < 1.18 |
| CVE-2026-82274 | 4.7 | Aug 28 | Twenty Open Redirect via OAuth Propagator Callback Affected: through 2.35.0 |
Showing 5