Security: go-vikunja/vikunja
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Path Traversal in CLI RestoreGHSA-42wg-38gx-85rh published
Feb 25, 2026 by kolaenteHigh -
Weak Password Policy Combined with Persistent Sessions After Password ChangeGHSA-3ccg-x393-96v8 published
Feb 25, 2026 by kolaenteCritical -
Stored Cross-Site Scripting (XSS) via Unsanitized SVG Attachment Upload Leading to Token ExposureGHSA-7jp5-298q-jg98 published
Feb 25, 2026 by kolaenteHigh -
Reflected HTML Injection via filter Parameter in Projects ModuleGHSA-4qgr-4h56-8895 published
Feb 25, 2026 by kolaenteModerate -
XSS Via Task PreviewGHSA-m4g2-2q66-vc9v published
Feb 11, 2026 by kolaenteHigh