Taigaio vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Taigaio products: 3 record(s), with severity, exploitation and fixes.

Taiga-back 2 Taiga-front 1

Exploited only (KEV) →

CVE-2026-41250 Medium · 5.7 CWE-79 May 11, 2026

XSS in taiga-front

Taiga is a project management platform for startups and agile developers. Prior 6.9.1, Taiga front is vulnerable to stored XSS. This vulnerability is fixed in 6.9.1.

CVE-2025-62368 Critical · 9.0 Public exploit CWE-502 Oct 28, 2025

Taiga Authenticated Remote Code Execution

Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remote code execution vulnerability exists in the Taiga API due to unsafe deserialization of untrusted data. This issue is fixed in version 6.9.0.

CVE-2025-62367 Medium · 4.8 CWE-89 Oct 28, 2025

Taiga Blind SQL Injection Time Based

Taiga is an open source project management platform. In versions 6.8.3 and earlier, Taiga API is vulnerable to time-based blind SQL injection allowing sensitive data disclosure via response timing. This issue is fixed in version 6.9.0.