Vulnerabilidades en go-vikunja
105 resultadosCVE-2026-33312MEDIUMRead-only Vikunja users can delete project background images via broken object-level authorizationEPSS 0.2%CVE-2026-35598MEDIUMVikunja has Missing Authorization on CalDAV Task ReadEPSS 0.2%CVE-2026-123517HIGHVikunja before 2.7.1 Information Disclosure via Team Self-Removal EndpointEPSS 0.2%CVE-2026-123504MEDIUMVikunja 0.22.0 before 2.7.1 Webhook URL Credential Exposure to Read-Only MembersEPSS 0.2%CVE-2026-111921MEDIUMVikunja 0.13.0 before 2.7.0 Incorrect Authorization in Link Share DeletionEPSS 0.2%CVE-2026-123506MEDIUMVikunja 2.2.0 before 2.7.1 Token Scope Bypass via Project Webhook EndpointsEPSS 0.2%CVE-2026-35601MEDIUMVikunja has an iCalendar Property Injection via CRLF in CalDAV Task OutputEPSS 0.2%CVE-2026-35600MEDIUMVikunja has HTML Injection via Task Titles in Overdue Email NotificationsEPSS 0.2%CVE-2026-123518MEDIUMVikunja before 2.7.1 Missing Authorization in Kanban Task-Bucket MoveEPSS 0.2%CVE-2026-111920MEDIUMVikunja 2.6.0 Broken Access Control via Inherited Project PermissionsEPSS 0.2%CVE-2026-111918MEDIUMVikunja 1.0.0-rc0 before 2.7.0 Cross-Tenant Task Position Writes via Saved Filter CreationEPSS 0.2%CVE-2026-123515MEDIUMVikunja before 2.7.1 Client-Side Request Forgery via Stored Rich-Text ImagesEPSS 0.2%CVE-2026-123497HIGHVikunja veans before 2.7.1 HTTPS to HTTP Downgrade in Server DiscoveryEPSS 0.2%CVE-2026-123529MEDIUMVikunja before 2.7.1 Stored CSS Injection via TipTap Table Cell data-background-colorEPSS 0.2%CVE-2026-123498LOWVikunja veans before 2.7.1 Prompt Injection via Project and Task MetadataEPSS 0.2%CVE-2026-111922HIGHVikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trusting Localhost OriginsEPSS 0.1%CVE-2026-123496MEDIUMVikunja veans before 2.7.1 Symlink Following in veans initEPSS 0.1%CVE-2026-123500MEDIUMVikunja before 2.7.1 Insecure Permissions on Dump Archive via vikunja dumpEPSS 0.1%CVE-2026-123499MEDIUMVikunja veans before 2.7.1 Credential Leak via Repo-Controlled .veans.yml ServerEPSS 0.1%CVE-2026-123494MEDIUMVikunja before 2.7.1 Login CSRF via Migration OAuth CallbacksEPSS 0.1%