code.vikunja.io/api vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-33677Mediumcode.vikunja.io/api: Vikjuna: Webhook BasicAuth Credentials Exposed to Read-Only Project Collaborators via APICVE-2026-33676Mediumcode.vikunja.io/api: Vikunja has Cross-Project Information Disclosure via Task Relations — Missing Authorization Check on Related Task ReadCVE-2026-33675Mediumcode.vikunja.io/api: Vikunja has SSRF via Todoist/Trello Migration File Attachment URLs that Allows Reading Internal Network ResourcesCVE-2026-33668Highcode.vikunja.io/api: Vikunja Allows Disabled/Locked User Accounts to Authenticate via API Tokens, CalDAV, and OpenID ConnectCVE-2026-33474Mediumcode.vikunja.io/api: Vikunja Affected by DoS via Image Preview GenerationCVE-2026-33473Mediumcode.vikunja.io/api: Vikunja has TOTP Reuse During Validity WindowCVE-2026-33316Highcode.vikunja.io/api: Vikunja’s Improper Access Control Enables Bypass of Administrator-Imposed Account Disablement CVE-2026-33315Mediumcode.vikunja.io/api: Vikunja has a 2FA Bypass via Caldav Basic AuthCVE-2026-33313Mediumcode.vikunja.io/api: Vikunja has an IDOR in Task Comments Allows Reading Arbitrary CommentsCVE-2026-33312Mediumcode.vikunja.io/api: Vikunja read-only users can delete project background images via broken object-level authorizationCVE-2026-29794Mediumcode.vikunja.io/api: Vikunja has a Rate-Limit Bypass for Unauthenticated Users via Spoofed HeadersCVE-2026-28268Criticalcode.vikunja.io/api: Vikunja Vulnerable to Account Takeover via Password Reset Token ReuseCVE-2026-27819Highcode.vikunja.io/api: Vikunja has Path Traversal in CLI RestoreCVE-2026-27616Highcode.vikunja.io/api: Vikunja: Stored XSS via Unsanitized SVG Attachment Upload Leads to Token ExposureCVE-2026-27575Criticalcode.vikunja.io/api: Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password ChangeCVE-2026-27116Mediumcode.vikunja.io/api: Vikunja has Reflected HTML Injection via filter Parameter in its Projects ModuleCVE-2026-25935Highcode.vikunja.io/api: Vikunja Vulnerable to XSS Via Task Preview

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo