open_web_analytics vulnerabilities

CVEs whose affected-version data names the open_web_analytics package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119646Medium· 4.3PoC

1w ago

Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API

Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other sites' report data because clickstream and transaction reports are not scoped to the authorized siteId. Users with vie…

▾ TwilightOpen Web Analytics · Open Web AnalyticsEPSS 0.46%via CVEORG