TW
Vendor
twentyhq
11
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105763 | TW twenty twentyhq | 9.6 | Oct 5 | Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL |
| CVE-2026-85055 | TW twenty twentyhq | 7.1 | Sep 22 | Twenty: Field-level read bypass |
| CVE-2026-92771 | TW twenty twentyhq | 6.5 | Sep 16 | Twenty before 2.35.0 Permission Bypass via groupBy-with-records Query |
| CVE-2026-82274 | TW twenty twentyhq | 4.7 | Aug 28 | Twenty Open Redirect via OAuth Propagator Callback |
| CVE-2026-73069 | TW twenty twentyhq | 9.1 | Aug 11 | Twenty: SQL Injection in the `searchVector` Field Settings Allows Arbitrary PostgreSQL Execution |
| CVE-2026-55583 | TW twenty twentyhq | 7.6 | Jun 24 | Twenty: Cross-workspace IDOR in AgentTurnResolver |
| CVE-2026-46624 | TW twenty twentyhq | 9.9 | May 26 | Twenty: SQL Injection via the timeZone field |
| CVE-2026-44729 | TW twenty twentyhq | 8.7 | May 26 | Twenty: Stored Cross-Site Scripting via Unsanitized File Serving (Missing Content-Type/Content-Disposition Headers) |
| CVE-2026-33975 | TW twenty twentyhq | 8.3 | May 5 | twenty-server SSRF protection bypass via IPv4-mapped IPv6 address normalization |
| CVE-2026-35451 | TW twenty twentyhq | 5.7 | Apr 21 | Twenty: Stored XSS via BlockNote FileBlock |
| CVE-2026-27023 | TW twenty twentyhq | 5.0 | Mar 5 | Twenty: SSRF protection bypass via HTTP redirect following in secure HTTP client |