Khoj security advisories
4 advisories across Khoj
| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 25 | khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem HighSep 25 | High | 2.0.0-beta.25 |
| Feb 2 | Khoj has an IDOR in Notion OAuth Flow that Enables Index PoisoningMedium5.4Feb 2 | Medium5.4 | No fix yet |
| Dec 302024 | khoj has an IDOR in subscription management allows unauthorized subscription modificationsMedium4.3Dec 30, 2024 | Medium4.3 | 1.29.0 |
| Aug 202024 | Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)Medium5.4Aug 20, 2024 | Medium5.4 | 1.15.0 |