taigaio/taiga-back

taigaio/taiga-back

Releases130

Frequency1 month 5 days

Last Release about 1 month ago

Stars835

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-62368 ↗	Oct 28, 2025Tuesday, 28 October 2025, 21:15	9 CRITICAL	—
Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remote code execution vulnerability exists in the Taiga API due to unsafe deserialization of untrusted data. This issue is fixed in version 6.9.0.
CVE-2025-62367 ↗	Oct 28, 2025Tuesday, 28 October 2025, 20:15	4.8 MEDIUM	—
Taiga is an open source project management platform. In versions 6.8.3 and earlier, Taiga API is vulnerable to time-based blind SQL injection allowing sensitive data disclosure via response timing. This issue is fixed in version 6.9.0.