Read the docs

Erudika

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Erudika records in CISA KEV

No Erudika vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Scoold 5 records MEDIUM Para 2 records LOW

Records

15 records

TI-2026-30501 CVE-2026-42176

Missing authentication in Erudika scoold

Priority HIGH 65

Scoold is a Q&A and a knowledge sharing platform for teams.

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.00312 Published 2026-05-08 Fixed in 1.67.0 CWE-306
TI-2022-01415 CVE-2022-1543 · GHSA-q6f4-32m8-8m5c

Improper handling of Length parameter in erudika/scoold

Priority MEDIUM 40

Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01114 Published 2022-04-29 Fixed in 1.49.4 CWE-130
TI-2022-01648 CVE-2022-1782 · GHSA-phvw-r25p-8xv7

Cross-site Scripting (XSS) - Generic in erudika/para

Priority LOW 29

Cross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0098 Published 2022-05-18 Fixed in v1.45.11, 1.45.11 CWE-79
TI-2025-31093 CVE-2025-48955 · GHSA-v75g-77vf-6jjq

Para Server Logs Sensitive Information

Priority LOW 27

Para is a multitenant backend server/framework for object persistence and retrieval.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00173 Published 2025-06-02 Fixed in 1.50.8 CWE-532
TI-2022-01712 CVE-2022-1848 · GHSA-4793-8wwh-jxxr

Business Logic Errors in erudika/para

Priority LOW 26

Business Logic Errors in GitHub repository erudika/para prior to 1.45.11.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01025 Published 2022-05-24 Fixed in 1.45.11, 1.46.0 CWE-840
Open these records in search →