Security: parseablehq/parseable
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Server-Side Request Forgery via alert notification target endpoint (reachable by editor/writer)GHSA-64vg-fp53-frjx published
Aug 15, 2026 by nitishtModerate -
Path traversal: authenticated arbitrary file write/delete via unvalidated `stream_name` in the Filters API (LocalFS)GHSA-q8xx-r33r-6mwv published
Aug 15, 2026 by nitishtHigh -
SSRF via webhook target endpoint reachable to Editor/Writer roles (alert delivery)GHSA-2qqm-w7v3-5hr6 published
Aug 15, 2026 by nitishtModerate -
Alert targets allow authenticated users to trigger server-side POST requests to arbitrary URLsGHSA-2x76-24x6-g2xm published
Aug 15, 2026 by nitishtHigh -
OIDC logout open redirect allows unauthenticated external users to bounce victims to arbitrary domainsGHSA-mh89-vfm3-c9q6 published
Aug 15, 2026 by nitishtModerate -
Unauthenticated Denial of Service via panic in Kinesis header parsing middlewareGHSA-x4q9-j9qh-3rpx published
Aug 15, 2026 by nitishtHigh
Learn more about advisories related to parseablehq/parseable in the GitHub Advisory Database