Advisoriesby IbisKhoj security advisories
4 advisories across Khoj
khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystemGHSA-62mm-xwmv-crhgfixed in 2.0.0-beta.25Khoj has an IDOR in Notion OAuth Flow that Enables Index PoisoningCVE-2025-69207no fix yetkhoj has an IDOR in subscription management allows unauthorized subscription modificationsCVE-2024-52294fixed in 1.29.0Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)CVE-2024-43396fixed in 1.15.0