Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Taiga Clear all filters
TI-2026-46463 CVE-2026-65055 · GHSA-rj5p-xwjf-qw97

Taiga taiga-back Private Project Member Roster Disclosure via Unauthenticated filters_data Endpoints

Priority HIGH 70

Taiga 6.10.1 contains a missing authorization vulnerability that allows unauthenticated attackers to disclose the full member roster and internal workflow configuration of any private project by supplying a project ID to…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00326 Published 2026-07-21 No fix listed CWE-862
TI-2026-42277 CVE-2026-59097 · GHSA-9rxg-cv94-jvcq

Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Priority HIGH 70

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00429 Published 2026-07-02 Fixed in 6.10.2 CWE-862