CyberSecBulletin

Taigaio vulnerabilities

We track 2 vulnerabilities in Taigaio products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2025.

2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score

Latest Taigaio vulnerabilities

  • 9.0 Critical severity

    taiga-back: Deserialization of Untrusted Data

    CVE-2025-62368TaigaioEPSS 1.54%

    Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remote code execution vulnerability exists in the Taiga API due to unsafe deserialization of untrusted data. This issue is fixed in version 6.9.0.

  • 8.0 High severity

    taiga_front: Improper Control of Generation of Code

    CVE-2024-53554Taigaio

    A Client-Side Template Injection (CSTI) vulnerability in the component /project/new/scrum of Taiga v 8.6.1 allows remote attackers to execute arbitrary code by injecting a malicious payload within the new project details.