{"action":"Upgrade khoj to 1.15.0 or later.","affected":[{"fixed":"1.15.0","introduced":"0"}],"component":"khoj","cve_ids":["CVE-2024-43396"],"ecosystem":"PyPI","epss":0.0055,"exploited":false,"fixed_versions":["1.15.0"],"ghsa_id":"GHSA-cf72-vg59-4j4h","id":"tcs_01M5KGSY3YSSE9R6SRJNEG10NN","modified_at":"2026-07-07T17:46:46.013975103Z","published_at":"2026-07-07T14:34:39.002433Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1492","https://github.com/khoj-ai/khoj/security/advisories/GHSA-cf72-vg59-4j4h","https://nvd.nist.gov/vuln/detail/CVE-2024-43396","https://github.com/khoj-ai/khoj/commit/1c7a562880eeb7354325545d2cf6c5d1d1134812","https://github.com/khoj-ai/khoj/commit/55be90cdd2f9d6a09c8bf9ceea52fc36b9201626","https://github.com/khoj-ai/khoj","https://pypi.org/project/khoj","https://github.com/advisories/GHSA-cf72-vg59-4j4h"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-1492","url":"https://osv.dev/vulnerability/PYSEC-2026-1492"}],"summary":"Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)"}