Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

15 records

Vendor: Erudika Clear all filters
TI-2026-30501 CVE-2026-42176

Missing authentication in Erudika scoold

Priority HIGH 65

Scoold is a Q&A and a knowledge sharing platform for teams.

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.00312 Published 2026-05-08 Fixed in 1.67.0 CWE-306
TI-2025-31093 CVE-2025-48955 · GHSA-v75g-77vf-6jjq

Para Server Logs Sensitive Information

Priority LOW 27

Para is a multitenant backend server/framework for object persistence and retrieval.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00173 Published 2025-06-02 Fixed in 1.50.8 CWE-532
TI-2022-01712 CVE-2022-1848 · GHSA-4793-8wwh-jxxr

Business Logic Errors in erudika/para

Priority LOW 26

Business Logic Errors in GitHub repository erudika/para prior to 1.45.11.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01025 Published 2022-05-24 Fixed in 1.45.11, 1.46.0 CWE-840
TI-2022-01648 CVE-2022-1782 · GHSA-phvw-r25p-8xv7

Cross-site Scripting (XSS) - Generic in erudika/para

Priority LOW 29

Cross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0098 Published 2022-05-18 Fixed in v1.45.11, 1.45.11 CWE-79
TI-2022-01415 CVE-2022-1543 · GHSA-q6f4-32m8-8m5c

Improper handling of Length parameter in erudika/scoold

Priority MEDIUM 40

Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01114 Published 2022-04-29 Fixed in 1.49.4 CWE-130