khoj-ai/khoj Security Advisories | GitStock

high2026-09-25

khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem

GHSA-62mm-xwmv-crhg

medium2026-02-02

Khoj has an IDOR in Notion OAuth Flow that Enables Index Poisoning

GHSA-6whj-7qmg-86qj · CVE-2025-69207

medium2024-12-30

khoj has an IDOR in subscription management allows unauthorized subscription modifications

GHSA-hq4h-w933-jm6c · CVE-2024-52294

medium2024-08-20

Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)

GHSA-cf72-vg59-4j4h · CVE-2024-43396

medium2024-07-08

Khoj Open Redirect Vulnerability in Login Page

GHSA-564j-v29w-rqr6