taiga-back vulnerabilities

CVEs whose affected-version data names the taiga-back package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-65055Medium· 5.3PoC

2mo ago

Taiga taiga-back Private Project Member Roster Disclosure via Unauthenticated filters_data Endpoints

Taiga 6.10.1 contains a missing authorization vulnerability that allows unauthenticated attackers to disclose the full member roster and internal workflow configuration of any private project by supplying a project ID to the filters_data…

▾ TwilightTaiga · taiga-backEPSS 0.43%via CVEORG