https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T06:49:22.796443+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-43396 CVE-2024-43396 — Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature) 2026-10-10T06:49:22.811166+00:00

Affected: khoj-ai khoj

Khoj is an application that creates personal AI agents. The Automation feature allows a user to insert arbitrary HTML inside the task instructions, resulting in a Stored XSS. The q parameter for the /api/automation endpoint does not get correctly sanitized when rendered on the page, resulting in the ability of users to inject arbitrary HTML/JS. This vulnerability is fixed in 1.15.0.