{"answers":{"affected":"3 open source packages ship an affected version, including taguette. It affects 1 product.","exploited":"It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-67502 exists.","fix":"Upgrade taguette to 1.5.2 or later.","what":"CVE-2025-67502 is a medium-severity vulnerability in remram44 taguette, published on 9 Dec 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link."},"fix_prompt":"Check this codebase for CVE-2025-67502 and fix it if it is affected.\n\nWhat it is: CVE-2025-67502 is a medium-severity vulnerability in remram44 taguette, published on 9 Dec 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.\nExploitation: It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-67502 exists.\n\nAffected packages and fixed versions:\n- taguette (PyPI): affected all versions; fixed in 1.5.2\n- taguette (PyPI): affected all versions; fixed in 1.5.2\n- taguette (PyPI): affected all versions; fixed in 1.5.2\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2025-67502/ (Markdown: https://insights.sbomify.com/CVE-2025-67502/index.md)","id":"CVE-2025-67502","markdown":"https://insights.sbomify.com/CVE-2025-67502/index.md","name":"CVE-2025-67502","record":{"aliases":["GHSA-5923-r76v-mprm","PYSEC-2026-1948"],"analysis":{"component_type":"web_application","fix_type":"upgrade","impacts":["security_bypass"],"network_reachable":"yes","non_default_config":false,"product_category":"Qualitative research tool","requires_auth":"none","summary":"Attackers can craft malicious URLs to redirect authenticated users to arbitrary external sites, facilitating phishing attacks against Taguette users.","user_interaction":"required","vuln_class":"open_redirect"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"GitHub_M","cpe":[{"product":"taguette","vendor":"taguette"}],"cvss":{"score":5.4,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"cwes":[{"id":"CWE-601","name":"URL Redirection to Untrusted Site"}],"description":"Taguette is an open source qualitative research tool. In versions 1.5.1 and below,  attackers can craft malicious URLs that redirect users to arbitrary external websites after authentication. The application accepts a user-controlled next parameter and uses it directly in HTTP redirects without any validation. This can be exploited for phishing attacks where victims believe they are interacting with a trusted Taguette instance but are redirected to a malicious site designed to steal credentials or deliver malware. This issue is fixed in version 1.5.2.","ecosystems":["PyPI"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"weaponised"},"has_fix":true,"headline":"Taguette does not safeguard against Open Redirect","id":"CVE-2025-67502","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"PyPI","product":null,"products":[],"type":"open_redirect","year":"2025"},"n_packages":3,"n_references":2,"next":{"headline":"This CVE is a duplicate of another CVE.","id":"CVE-2025-67503"},"packages":[{"ecosystem":"PyPI","fixed":["1.5.2"],"introduced":["0"],"last_affected":[],"package":"taguette","purl":null,"source":"GHSA-5923-r76v-mprm"},{"ecosystem":"PyPI","fixed":["1.5.2"],"introduced":["0"],"last_affected":[],"package":"taguette","purl":"pkg:pypi/taguette","source":"GHSA-5923-r76v-mprm"},{"ecosystem":"PyPI","fixed":["1.5.2"],"introduced":["0"],"last_affected":[],"package":"taguette","purl":"pkg:pypi/taguette","source":"PYSEC-2026-1948"}],"prev":{"headline":"WeGIA is vulnerable to SQL Injection via editar_categoria endpoint parameter","id":"CVE-2025-67501"},"products":["taguette"],"published":"2025-12-09","related":[{"cvss_score":7.1,"headline":"Taguette vulnerable to password reset link poisoning","id":"CVE-2025-62527","kev_date_added":null,"published":"2025-10-20"},{"cvss_score":5.4,"headline":"Taguette cross-site scripting vulnerability via tag name, tag description, document name and document description","id":"CVE-2025-62528","kev_date_added":null,"published":"2025-10-20"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"CC BY 4.0","name":"PyPA Advisory Database","prefix":"PYSEC"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"poc","technical_impact":"partial"},"state":"PUBLISHED","updated":"2025-12-10","vendors":["remram44"]},"summary":"Attackers can craft malicious URLs to redirect authenticated users to arbitrary external sites, facilitating phishing attacks against Taguette users.","url":"https://insights.sbomify.com/CVE-2025-67502/"}