Skip to main content
← PyPI

khoj

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
PyPI

Advisories 3

  • CVE-2025-69207Medium 5.4

    Khoj has an IDOR in Notion OAuth Flow Enables Index Poisoning

    Affected: through 2.0.0b25.dev3.

  • CVE-2024-52294Medium 4.3

    khoj has an IDOR in subscription management that allows unauthorized subscription modifications

    Affected: fixed in 1.29.0.

  • CVE-2024-43396Medium 5.4

    Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)

    Affected: fixed in 1.15.0.