CVE-2026-125115
Novu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition
Novu provides an API for sending notifications through multiple channels. Prior to 3.17.0, validateUrlSsrf in libs/application-generic/src/utils/ssrf-url-validation.ts uses the isPrivateIp deny-list without covering the RFC6598 100.64.0.0/10 shared address space or its IPv4-mapped IPv6 forms. The workflow HTTP request step and webhook filter condition can therefore send server-side requests when a configured literal address or resolved hostname falls in that range. In Alibaba Cloud, 100.100.100.200 may expose instance metadata, while self-hosted and multi-tenant deployments may expose provider-internal services, private infrastructure, service meshes, or VPN resources reachable through CGNAT addressing. This issue is fixed in version 3.17.0.
Fixes and workarounds
Fix
@novu/application-generic (npm): OSV reports a fixed version 3.17.0. Check the advisory for supported release branches.
Source: OSV GHSA-vg6v-j97m-h5xqAffected products and versions
| Product | Versions | Authority |
|---|---|---|
| novu novuhq |
< 3.17.0 (affected) | CNA: GitHub_M |
| application-generic @novu |
< 3.17.0 (affected) | CNA: GitHub_M |
@novu/application-generic@novu/application-generic
npm |
≥ 0; < 3.17.0 (affected, semver); OSV events: introduced 0; fixed 3.17.0Source events (semver)Other versions: unaffected |
OSV GHSA-vg6v-j97m-h5xq |
Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.
CVSS assessments
| Version / score | Vector | Authority |
|---|---|---|
| 3.1 / 6.8 medium |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N | CNA: GitHub_M |
| 3.1 / 6.8 medium |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N | NVD: [email protected] |
Exploit evidence
No exploit evidence in collected sources. This is not proof of no exploitation.
References
- https://github.com/novuhq/novu/security/advisories/GHSA-vg6v-j97m-h5xqCNA: GitHub_M · x_refsource_CONFIRM
- https://github.com/novuhq/novu/pull/11197CNA: GitHub_M · x_refsource_MISC
- https://github.com/novuhq/novu/releases/tag/v3.17.0CNA: GitHub_M · x_refsource_MISC
- https://github.com/novuhq/novu/pull/11197[email protected]
- https://github.com/novuhq/novu/releases/tag/v3.17.0[email protected]
- https://github.com/novuhq/novu/security/advisories/GHSA-vg6v-j97m-h5xq[email protected]
- https://github.com/advisories/GHSA-vg6v-j97m-h5xqOSV / GitHub Security Advisories · advisory
- https://osv.dev/vulnerability/GHSA-vg6v-j97m-h5xqOSV / GitHub Security Advisories · osv
For agents and automation
Read public disclosures for free as Markdown or JSON. Compatible browsers also expose native WebMCP tools to search disclosures, read this page, and discover API access.
Use the ontology-linked Cyber API with x402 pay per request, or a Y2 Pro or Elite API key with the intel:cyber scope.
Endpoints and access details
https://api.y2.dev/api/v2/cyber/cveshttps://api.y2.dev/api/v2/cyber/cves/{cveId}
A workspace owner or admin can create a Pro or Elite API key. Send Authorization: Bearer <Y2_API_KEY> from your trusted agent runtime.
For x402, omit Authorization and read the HTTP 402 payment challenge before signing a retry. Public browser tools do not make payments.