Vulnerabilidades en go-vikunja
105 resultadosCVE-2026-123524MEDIUMVikunja 0.23.0 before 2.7.1 Information Disclosure via Webhook related_tasks PayloadEPSS 0.3%CVE-2026-123522HIGHVikunja before 2.7.1 Task Information Disclosure via Kanban Bucket Move WebhookEPSS 0.3%CVE-2026-35597MEDIUMVikunja Affected by TOTP Brute-Force Due to Non-Functional Account LockoutEPSS 0.3%CVE-2026-123501HIGHVikunja before 2.7.1 Memory Exhaustion DoS via Unbounded Image DecodesEPSS 0.3%CVE-2026-123519HIGHVikunja before 2.7.1 Memory Exhaustion DoS via WeKan and Vikunja-File ImportsEPSS 0.3%CVE-2026-123523HIGHVikunja before 2.7.1 Memory Exhaustion via Unbounded Avatar Size CacheEPSS 0.3%CVE-2026-123525HIGHVikunja before 2.7.1 Memory Exhaustion DoS via Trello, Todoist and Microsoft To Do MigrationsEPSS 0.3%CVE-2026-91980MEDIUMvikunja before 2.6.0 Team Enumeration via Project ShareEPSS 0.3%CVE-2026-91981MEDIUMVikunja before 2.6.0 User Enumeration via v2 APIEPSS 0.3%CVE-2026-91983MEDIUMVikunja before 2.6.0 API Token Scope Bypass via expand ParameterEPSS 0.3%CVE-2026-33677MEDIUMWebhook BasicAuth Credentials Exposed to Read-Only Project Collaborators via APIEPSS 0.3%CVE-2026-123520HIGHVikunja 0.18.0 before 2.7.1 Privilege Escalation via Account DeletionEPSS 0.3%CVE-2026-123516HIGHVikunja before 2.7.1 Resource Exhaustion via Vikunja-File ZIP ImportEPSS 0.3%CVE-2026-35595HIGHVikunja Affected by Privilege Escalation via Project ReparentingEPSS 0.3%CVE-2026-34727HIGHVikunja ahs a TOTP Two-Factor Authentication Bypass via OIDC Login PathEPSS 0.3%CVE-2026-123507MEDIUMVikunja 0.24.0 before 2.7.1 Denial of Service via Nil Bucket FilterEPSS 0.3%CVE-2026-35596MEDIUMVikunja has Broken Access Control on Label Read via SQL Operator Precedence BugEPSS 0.3%CVE-2026-115507MEDIUMVikunja 2.2.0 before 2.7.1 HTML Injection via Notification Email HeaderEPSS 0.3%CVE-2026-33675MEDIUMVikunja has SSRF via Todoist/Trello Migration File Attachment URLs that Allows Reading Internal Network ResourcesEPSS 0.3%CVE-2026-62376HIGHVikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read accessEPSS 0.3%