{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.0.0b25.dev3"}],"component":"khoj","cve_ids":["CVE-2025-69207"],"ecosystem":"PyPI","epss":0.00421,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6whj-7qmg-86qj","id":"tcs_01M5KF4D7CSM9TF6T276D9YKZE","modified_at":"2026-07-07T17:57:14.355009212Z","published_at":"2026-02-02T17:31:33Z","references":["https://osv.dev/vulnerability/GHSA-6whj-7qmg-86qj","https://github.com/khoj-ai/khoj/security/advisories/GHSA-6whj-7qmg-86qj","https://nvd.nist.gov/vuln/detail/CVE-2025-69207","https://github.com/khoj-ai/khoj/commit/1b7ccd141d47f365edeccc57d7316cb0913d748b","https://github.com/khoj-ai/khoj","https://github.com/khoj-ai/khoj/releases/tag/2.0.0-beta.23"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-6whj-7qmg-86qj","url":"https://osv.dev/vulnerability/GHSA-6whj-7qmg-86qj"}],"summary":"Khoj has an IDOR in Notion OAuth Flow that Enables Index Poisoning"}