Product by Twentyhq
Twenty
11 known vulnerabilities in Twenty (Twentyhq), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-73069 | Twenty: SQL Injection in the `searchVector` Field Settings Allows Arbitrary PostgreSQL Execution | 9.1 | |
| Critical | CVE-2026-46624 | Twenty: SQL Injection via the timeZone field | 9.9 | |
| Critical | CVE-2026-105763 | Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL | 9.6 | |
| High | CVE-2026-85055 | Twenty: Field-level read bypass | — | |
| High | CVE-2026-92771 | Twenty before 2.35.0 Permission Bypass via groupBy-with-records Query | 6.5 | |
| High | CVE-2026-44729 | Twenty: Cross-site Scripting | 8.7 | |
| High | CVE-2026-33975 | twenty-server SSRF protection bypass via IPv4-mapped IPv6 address normalization | — | |
| Medium | CVE-2026-82274 | Twenty Open Redirect via OAuth Propagator Callback | 4.7 | |
| High | CVE-2026-55583 | Twenty: Cross-workspace IDOR in AgentTurnResolver | 7.6 | |
| Medium | CVE-2026-35451 | Twenty: Stored XSS via BlockNote FileBlock | 5.7 | |
| Medium | CVE-2026-27023 | Twenty: SSRF protection bypass via HTTP redirect following in secure HTTP client | 5.0 |