go-vikunja vulnerabilities

Vikunja 1.0.0 before 2.7.1 Pagination Limit Bypass via page=0 Parameter

go-vikunja · vikunja

Vikunja before 2.7.1 Missing Step-Up Authentication via TOTP Enrollment Endpoints

go-vikunja · vikunja

Vikunja before 2.7.1 Stored CSS Injection via TipTap Table Cell data-background-color

go-vikunja · vikunja

Vikunja before 2.7.1 Insufficient Session Expiration via HTTP Token Middleware

go-vikunja · vikunja

Vikunja 2.4.0 before 2.7.1 API Token Scope Collision Authorization Bypass

go-vikunja · vikunja

Vikunja before 2.7.1 Mass Assignment via Team external_id Field

go-vikunja · vikunja

Vikunja before 2.7.1 Memory Exhaustion DoS via Trello, Todoist and Microsoft To Do Migrations

go-vikunja · vikunja

Vikunja 0.23.0 before 2.7.1 Information Disclosure via Webhook related_tasks Payload

go-vikunja · vikunja

Vikunja before 2.7.1 Memory Exhaustion via Unbounded Avatar Size Cache

go-vikunja · vikunja

Vikunja before 2.7.1 Task Information Disclosure via Kanban Bucket Move Webhook

go-vikunja · vikunja