opencti-platform/opencti Security Advisories | GitStock

high2026-06-22

OpenCTI has Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature

GHSA-ffm6-vvph-g5f5 · CVE-2026-21887

medium2026-06-22

OpenCTI May Bypass Introspection Restriction

GHSA-4mvw-j8r9-xcgc · CVE-2024-37155

high2026-05-28

OpenCTI: Privilege escalation via graphQL API is abusable by organization admins, due to incorrect ACL on userEdit relationAdd

GHSA-q537-qhj4-wcjx · CVE-2026-44730