oneuptime

v4.0.69npm· JavaScript

OneUptime is a JS package that tracks error event and send logs from your applications to your oneuptime dashboard.

The verdict

Has 5 high-severity advisories. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityNiche

Security5 advisories

LicensePermissive

DepsHeavy

Maintenance

Last published 3 years ago.

Popularity

13 downloads / week

Security

5 known advisories (worst: high severity).

License

ISC

Dependencies

21 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
OneUptime WhatsApp Webhook Missing Signature Verification
GHSA-g5ph-f57v-mwjc Fixed in 10.0.34Published 2026-03-18
HIGH
OneUptime ClickHouse vulnerable to SQL Injection via unvalidated column identifiers in sort, select, and groupBy parameters
GHSA-gcg3-c5p2-cqgg Fixed in 10.0.34Published 2026-03-18
HIGH
OneUptime ClickHouse SQL Injection via Aggregate Query Parameters
GHSA-p5g2-jm85-8g35 Fixed in 10.0.23Published 2026-03-13
HIGH
OneUptime: Stored XSS via Mermaid Diagram Rendering (securityLevel: "loose")
GHSA-wvh5-6vjm-23qh Fixed in 10.0.23Published 2026-03-13
MEDIUM
OneUptime: Password Reset Token Logged at INFO Level
GHSA-4524-cj9j-g4fj Fixed in 10.0.23Published 2026-03-13

Recent releases