taguette vulnerabilities
CVEs whose affected-version data names the taguette package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2025-67502Medium· 5.4Taguette is an open source qualitative research tool
Taguette is an open source qualitative research tool. In versions 1.5.1 and below, attackers can craft malicious URLs that redirect users to arbitrary external websites after authentication. The application accepts a user-controlled nex…
CVE-2025-62528Medium· 5.4Taguette is an open source qualitative research tool
Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load.…
CVE-2025-62527High· 7.1Taguette is an open source qualitative research tool
Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to…