Onesignal vulnerabilities

4 CVEs affecting Onesignal products, 0 known to be exploited (CISA KEV), with EPSS scores. Most affected: Onesignal – Web Push Notifications, Onesignal-Free-Web-Push-Notifications, React-Native-Onesignal.

• Onesignal – Web Push Notifications: 2 CVEs
• Onesignal-Free-Web-Push-Notifications: 1 CVE
• React-Native-Onesignal: 1 CVE