taguette
PyPI3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting taguettepage 1 of 1
- CVE-2025-62527HIGHCVSS 7.1EG 7.1✓ Fixed in 1.5.12025-10-20
vulnerable: 0.0 ... 1.5.0 (28 versions)
Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to s…
- CVE-2025-62528MEDIUMCVSS 5.4EG 5.4✓ Fixed in 1.5.02025-10-20
vulnerable: 0.0 ... 1.4.1 (27 versions)
Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. T…
- CVE-2025-67502MEDIUMCVSS 6.1EG 6.1✓ Fixed in 1.5.22025-12-10
vulnerable: 0.0 ... 1.5.1 (29 versions)
Taguette is an open source qualitative research tool. In versions 1.5.1 and below, attackers can craft malicious URLs that redirect users to arbitrary external websites after authentication. The application accepts a user-controlled next …
Check whether taguette is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for taguette CVEs against the assets you own.
Start Free Scan →