OP
Product
openproject
54
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 7High 14Medium 31Low 2
Watch
Add openproject to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-23721 | 4.3 | Jan 19 | OpenProject users with "View Members" permission in any project can view all Group memberships Affected: < 16.6.5; = 17.0.0 |
| CVE-2026-22605 | 4.3 | Jan 10 | OpenProject is Vulnerable to Insecure Direct Object Reference in Meetings Affected: < 16.6.3 |
| CVE-2026-25764 | 3.5 | Feb 6 | OpenProject vulnerable to Stored HTML injection Affected: < 16.6.7; < 17.0.3 |
| CVE-2026-22602 | 3.5 | Jan 10 | OpenProject is Vulnerable to User Enumeration via User ID Affected: < 16.6.2 |