en
OpenPanel-dev is the maintainer of OpenPanel, an open-source platform for web and product analytics. It provides cloud-hosted and self-hosted deployment options for collecting events and examining website traffic, product usage, user journeys, funnels, retention, and revenue data.
As of 10/19/2026, Openpanel-dev recorded 18 security vulnerabilities in the last 90 days across 1 products, including 10 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, openpanel had the most security vulnerabilities in the Openpanel-dev ecosystem, with 18 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-108579OpenPanel through 2.3.0 CSV Formula Injection via Cohort Member ExportCVE-2026-93985OpenPanel js-runtime through 2.3.0 JavaScript Template Sandbox Escape RCECVE-2026-93984OpenPanel API through 2.3.0 Authentication Bypass via Unverified Client SecretCVE-2026-93983OpenPanel through 2.3.0 SQL Injection via ClickHouse Property Key FilterCVE-2026-93982OpenPanel through 2.3.0 MCP Authentication Token in Query Parameter Logged Plaintext18 Results | Page 1 of 2
| SeverityCritical |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |