Vulnerabilidades en go-vikunja
105 resultadosCVE-2026-33316HIGHVikunja’s Improper Access Control Enables Bypass of Administrator-Imposed Account DisablementEPSS 0.4%CVE-2026-123531HIGHVikunja 1.0.0 before 2.7.1 Pagination Limit Bypass via page=0 ParameterEPSS 0.4%CVE-2026-55066HIGHVikunja: Cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_idEPSS 0.4%CVE-2026-55064MEDIUMVikunja incomplete fix for CVE-2026-35595: Write-only user can detach shared project from parent hierarchy via parent_project_id=0EPSS 0.4%CVE-2026-76216HIGHVikunja through 2.4.0 Principal-Type Confusion via LinkSharingEPSS 0.4%CVE-2026-33676MEDIUMVikunja has Cross-Project Information Disclosure via Task Relations — Missing Authorization Check on Related Task ReadEPSS 0.4%CVE-2026-35599MEDIUMVikunja has an Algorithmic Complexity DoS in Repeating Task HandlerEPSS 0.4%CVE-2026-111919HIGHVikunja 0.22.0 before 2.7.0 Improper Access Revocation via WebhooksEPSS 0.4%CVE-2026-111917HIGHVikunja 2.3.0 before 2.7.0 WebSocket Authentication Ignores Session RevocationEPSS 0.4%CVE-2026-35602MEDIUMVikunja has a File Size Limit Bypass via Vikunja ImportEPSS 0.4%CVE-2026-29794MEDIUMVikunja has Rate-Limit Bypass for Unauthenticated Users via Spoofed HeadersEPSS 0.3%CVE-2026-91982MEDIUMVikunja before 2.6.0 TOTP Secret Disclosure via APIEPSS 0.3%CVE-2026-55067MEDIUMVikunja: Authenticated cross-tenant kanban-bucket relocation via `project_view_id` mass-assignmentEPSS 0.3%CVE-2026-57458HIGHVikunja: Scoped API token can mint unrestricted OAuth session credentialsEPSS 0.3%CVE-2026-68582CRITICALVikunja 0.24.0 Broken Object Level Authorization via Link-Share TokenEPSS 0.3%CVE-2026-33473MEDIUMVikunja has TOTP Reuse During Validity WindowEPSS 0.3%CVE-2026-33474MEDIUMVikunja Affected by DoS via Image Preview GenerationEPSS 0.3%CVE-2026-33678HIGHVikunja has IDOR in Task Attachment ReadOne Allows Cross-Project File Access and DeletionEPSS 0.3%CVE-2026-35594MEDIUMVikunja Link Share JWT tokens remain valid for 72 hours after share deletion or permission downgradeEPSS 0.3%CVE-2026-33315MEDIUMVikunja has a 2FA Bypass via Caldav Basic AuthEPSS 0.3%