Vulnerabilities in go-vikunja
105 resultsCVE-2026-123505MEDIUMVikunja before 2.7.1 World-Readable Local File Storage and SQLite DatabaseEPSS 0.1%CVE-2026-123495MEDIUMVikunja 2.0.0 before 2.7.1 Login CSRF via /api/v2 Login and OIDC CallbackEPSS 0.1%CVE-2026-123510LOWVikunja before 2.7.1 Plugin and Log Directories Not Anchored to RootpathEPSS 0.1%CVE-2026-123508LOWVikunja before 2.7.1 Supply Chain Risk via Unpinned xgo Release ToolchainEPSS 0.1%CVE-2026-62367HIGHVikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeoverEPSS 0.1%