Medium severity4.8OSV Advisory· Published Oct 28, 2025· Updated Apr 15, 2026
CVE-2025-62367
CVE-2025-62367
Description
Taiga is an open source project management platform. In versions 6.8.3 and earlier, Taiga API is vulnerable to time-based blind SQL injection allowing sensitive data disclosure via response timing. This issue is fixed in version 6.9.0.
Affected products
1- Range: 1.0.0, 1.0b1, 1.1.0, …
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.