{"action":"Upgrade khoj to 1.15.0 or later.","affected":[{"fixed":"1.15.0","introduced":"0"}],"component":"khoj","cve_ids":["CVE-2024-43396"],"ecosystem":"PyPI","epss":0.0055,"exploited":false,"fixed_versions":["1.15.0"],"ghsa_id":"GHSA-cf72-vg59-4j4h","id":"tcs_01M5KFCRAW32WWYK71MW26KPTB","modified_at":"2026-07-07T17:56:50.241777115Z","published_at":"2024-08-20T19:59:32Z","references":["https://osv.dev/vulnerability/GHSA-cf72-vg59-4j4h","https://github.com/khoj-ai/khoj/security/advisories/GHSA-cf72-vg59-4j4h","https://nvd.nist.gov/vuln/detail/CVE-2024-43396","https://github.com/khoj-ai/khoj/commit/1c7a562880eeb7354325545d2cf6c5d1d1134812","https://github.com/khoj-ai/khoj/commit/55be90cdd2f9d6a09c8bf9ceea52fc36b9201626","https://github.com/khoj-ai/khoj"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-cf72-vg59-4j4h","url":"https://osv.dev/vulnerability/GHSA-cf72-vg59-4j4h"}],"summary":"Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)"}