Junglewise Threat Intelligence

CVE-2024-43396: PYSEC-2026-1492 - Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)

CVE-2024-43396 · Severity: low · CVSS 3.1 · Published 2026-07-07

Technologies: khoj (PyPI). Vendors: PyPI.

Executive brief

Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)

Affected products

PyPI khoj

Related threats

khoj unauthenticated path traversal in /home/ endpoint
PYSEC-2026-1491 - Khoj has an IDOR in Notion OAuth Flow that Enables Index Poisoning
PYSEC-2026-1493 - khoj has an IDOR in subscription management allows unauthorized subscription modifications