Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-m687-p538-r5hp
  • Go/code.vikunja.io/api
 Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin... yesterday
  • No fix available
  • Severity - 7.2 (High)
GHSA-fmmf-xq98-g327
  • Go/code.vikunja.io/api
 Vikunja: Write-level project members can delete admin-tier link shares through... yesterday
  • No fix available
  • Severity - 6.9 (Medium)
GHSA-pjr3-86v4-5p7w
  • Go/code.vikunja.io/api
 Vikunja: Explicit lower-permission share on a sub-project is silently... yesterday
  • No fix available
  • Severity - 5.4 (Medium)
GHSA-hjx8-qv73-f7cm
  • Go/code.vikunja.io/api
 Vikunja: Webhooks and link shares survive every revocation path, so a removed... yesterday
  • No fix available
  • Severity - 6.5 (Medium)
GHSA-fprf-r6rv-xg99
  • Go/code.vikunja.io/api
 Vikunja: Saved filter creation with an empty filter string recalculates task... yesterday
  • No fix available
  • Severity - 5.4 (Medium)
GHSA-4hv6-xc92-j86g
  • Go/code.vikunja.io/api
 Vikunja: WebSocket authentication ignores server-side session state, so revoked... yesterday
  • No fix available
  • Severity - 6.5 (Medium)
GHSA-j3hg-9rp3-5hw9
  • Go/github.com/0xJacky/Nginx-UI
 Nginx UI: Unauthenticated signed-request body staging can exhaust temporary... yesterday
  • Fix available
  • Severity - 7.5 (High)
GHSA-9h23-53f4-q947
  • Go/github.com/0xJacky/Nginx-UI
 Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared... yesterday
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-w2ch-4xgr-22ww
  • Go/code.vikunja.io/api
 Vikunja: Task relation deletion does not check read access to the other task,... yesterday
  • Fix available
  • Severity - 2.3 (Low)
GHSA-8wvg-r2j4-3737
  • Go/code.vikunja.io/api
 Vikunja: Assignee email addresses disclosed to read-only project members via... yesterday
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-3hc7-r24j-rpwc
  • Go/code.vikunja.io/api
 Vikunja: Cross-project task disclosure through subtask expansion yesterday
  • Fix available
  • Severity - 6.0 (Medium)
GHSA-g38j-7v97-x298
  • Go/code.vikunja.io/api
 Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an... yesterday
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-wq92-8x3r-fm38
  • Go/code.vikunja.io/api
 Vikunja: Planka migration retains an unbounded aggregate of attacker-served... yesterday
  • Fix available
  • Severity - 7.1 (High)
GHSA-pqf9-h8g4-8gmh
  • Go/code.vikunja.io/api
 Vikunja: Unbounded CSV row cardinality permits API process termination yesterday
  • Fix available
  • Severity - 7.1 (High)
GHSA-xxc3-xpmc-vmvr
  • Go/code.vikunja.io/api
 Vikunja: Unbounded nested task-filter recursion permits API process termination yesterday
  • Fix available
  • Severity - 7.1 (High)
GHSA-w7jp-mf2v-8342
  • Go/code.vikunja.io/api
 Vikunja: Denial of service via decompression bomb in the data import yesterday
  • Fix available
  • Severity - 7.1 (High)
Load more...