Vulnerabilidades de Taigaio
CVEs publicadas que afetam produtos de Taigaio: 3 registro(s), com severidade, exploração e correções.
CVE-2026-41250
Média · 5.7
CWE-79 11/05/2026
XSS in taiga-front
Taiga is a project management platform for startups and agile developers. Prior 6.9.1, Taiga front is vulnerable to stored XSS. This vulnerability is fixed in 6.9.1.
CVE-2025-62368
Crítica · 9.0
Exploit público CWE-502 28/10/2025
Taiga Authenticated Remote Code Execution
Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remote code execution vulnerability exists in the Taiga API due to unsafe deserialization of untrusted data. This issue is fixed in version 6.9.0.
CVE-2025-62367
Média · 4.8
CWE-89 28/10/2025
Taiga Blind SQL Injection Time Based
Taiga is an open source project management platform. In versions 6.8.3 and earlier, Taiga API is vulnerable to time-based blind SQL injection allowing sensitive data disclosure via response timing. This issue is fixed in version 6.9.0.