Avaiga vulnerabilities
We track 2 vulnerabilities in Avaiga products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 3, 2026.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Avaiga vulnerabilities
- 9.3 Critical severity
taipy: Missing Origin Validation in WebSockets
Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim applications. Attackers can open socket.io sessions from arbitrary domains and invoke s
- 7.5 High severity
taipy: Improper Limitation of a Pathname to a Restricted Directory
Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the ElementLibrary.get_resource() method in taipy/gui/extension/library.py that allows unauthenticated attackers to escape the intended module directory by exploiting an incomplet