Advisoriesby Ibis
Khoj security advisories
4 advisories · 1 critical or high in 12 months · latest Sep 25
4 advisories
khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystemGHSA-62mm-xwmv-crhgfixed in 2.0.0-beta.25Khoj has an IDOR in Notion OAuth Flow that Enables Index PoisoningCVE-2025-69207no fix yetkhoj has an IDOR in subscription management allows unauthorized subscription modificationsCVE-2024-52294fixed in 1.29.0Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)CVE-2024-43396fixed in 1.15.0About Khoj
Your AI second brain. Self-hostable. Get answers from the web or your docs. Build custom agents, schedule automations, do deep research. Turn any online or local LLM into your personal, autonomous AI (gpt, claude, gemini, llama, qwen, mistral). Get started - free.
Packages watched: khoj (PyPI).