Skip to content
OpenAdvisories

Vendor

Avaiga

3 known vulnerabilities.

Products

taipy 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-85183

    Taipy through 4.1.1 Cross-Site WebSocket Hijacking via Wildcard socket.io CORS

    Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim applications. Attackers can open socket.io sessions from arbitrary domains and invoke …

    Avaiga taipy