Go - OSV

GHSA-m687-p538-r5hp

Go/code.vikunja.io/api

Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin... 2 days ago

No fix available
Severity - 7.2 (High)

GHSA-fmmf-xq98-g327

Go/code.vikunja.io/api

Vikunja: Write-level project members can delete admin-tier link shares through... 2 days ago

No fix available
Severity - 6.9 (Medium)

GHSA-pjr3-86v4-5p7w

Go/code.vikunja.io/api

Vikunja: Explicit lower-permission share on a sub-project is silently... 2 days ago

No fix available
Severity - 5.4 (Medium)

GHSA-hjx8-qv73-f7cm

Go/code.vikunja.io/api

Vikunja: Webhooks and link shares survive every revocation path, so a removed... 2 days ago

No fix available
Severity - 6.5 (Medium)

GHSA-fprf-r6rv-xg99

Go/code.vikunja.io/api

Vikunja: Saved filter creation with an empty filter string recalculates task... 2 days ago

No fix available
Severity - 5.4 (Medium)

GHSA-4hv6-xc92-j86g

Go/code.vikunja.io/api

Vikunja: WebSocket authentication ignores server-side session state, so revoked... 2 days ago

No fix available
Severity - 6.5 (Medium)

GHSA-j3hg-9rp3-5hw9

Go/github.com/0xJacky/Nginx-UI

Nginx UI: Unauthenticated signed-request body staging can exhaust temporary... 2 days ago

Fix available
Severity - 7.5 (High)

GHSA-9h23-53f4-q947

Go/github.com/0xJacky/Nginx-UI

Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared... 2 days ago

Fix available
Severity - 5.3 (Medium)

GHSA-w2ch-4xgr-22ww

Go/code.vikunja.io/api

Vikunja: Task relation deletion does not check read access to the other task,... 2 days ago

Fix available
Severity - 2.3 (Low)

GHSA-8wvg-r2j4-3737

Go/code.vikunja.io/api

Vikunja: Assignee email addresses disclosed to read-only project members via... 2 days ago

Fix available
Severity - 5.3 (Medium)

GHSA-3hc7-r24j-rpwc

Go/code.vikunja.io/api

Vikunja: Cross-project task disclosure through subtask expansion 2 days ago

Fix available
Severity - 6.0 (Medium)

GHSA-g38j-7v97-x298

Go/code.vikunja.io/api

Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an... 2 days ago

Fix available
Severity - 6.3 (Medium)

GHSA-wq92-8x3r-fm38

Go/code.vikunja.io/api

Vikunja: Planka migration retains an unbounded aggregate of attacker-served... 2 days ago

Fix available
Severity - 7.1 (High)

GHSA-pqf9-h8g4-8gmh

Go/code.vikunja.io/api

Vikunja: Unbounded CSV row cardinality permits API process termination 2 days ago

Fix available
Severity - 7.1 (High)

GHSA-xxc3-xpmc-vmvr

Go/code.vikunja.io/api

Vikunja: Unbounded nested task-filter recursion permits API process termination 2 days ago

Fix available
Severity - 7.1 (High)

GHSA-w7jp-mf2v-8342

Go/code.vikunja.io/api

Vikunja: Denial of service via decompression bomb in the data import 2 days ago

Fix available
Severity - 7.1 (High)

Vulnerabilities