Skip to content
OpenAdvisories

Package · PyPI

khoj-assistant

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    GHSA-564j-v29w-rqr6

    Khoj Open Redirect Vulnerability in Login Page

    ### Summary An attacker can use the `next` parameter on the login page to redirect a victim to a malicious page, while masking this using a legit-looking `app.khoj.dev` url. For example, `https://app.khoj.dev/login?next=//example.com` will redirect to the htt…

    khoj-assistant PyPI