Please contact us at contact@onlook.com with any security issues.
Security: onlook-dev/onlook
Security
SECURITY.md
-
Open Redirect in OAuth Callback HandlerGHSA-q42p-j3fm-rvq8 published
Dec 14, 2025 by drfarrellModerate -
DOM-based Cross-Site Scripting (XSS) in Text EditorGHSA-w73g-vc27-2pg2 published
Dec 14, 2025 by drfarrellModerate -
Broken Object Level Authorization in Project Mutation APIsGHSA-82m4-w39c-pgq6 published
Dec 14, 2025 by drfarrellHigh
Learn more about advisories related to onlook-dev/onlook in the GitHub Advisory Database