| Package | Affected versions | Patched versions |
|---|---|---|
| oneuptime | < 10.0.40 | 10.0.40 |
OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free