Read the docs

Taiga

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Taiga records in CISA KEV

No Taiga vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-46463 CVE-2026-65055 · GHSA-rj5p-xwjf-qw97

Taiga taiga-back Private Project Member Roster Disclosure via Unauthenticated filters_data Endpoints

Priority HIGH 70

Taiga 6.10.1 contains a missing authorization vulnerability that allows unauthenticated attackers to disclose the full member roster and internal workflow configuration of any private project by supplying a project ID to…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00326 Published 2026-07-21 No fix listed CWE-862
TI-2026-42277 CVE-2026-59097 · GHSA-9rxg-cv94-jvcq

Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Priority HIGH 70

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00429 Published 2026-07-02 Fixed in 6.10.2 CWE-862
Open these records in search →