Vikunja
35 known vulnerabilities
Top Products
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's scoped API token enforcement f
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the Vikunja file import endpoint uses th
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV output generator builds iCale
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, task titles are embedded directly into M
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the addRepeatIntervalToTime function use
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV GetResource and GetResourcesB
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the TOTP failed-attempt lockout mechanis
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the hasAccessToLabel function contains a
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CanUpdate check at pkg/models/projec
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's link share authentication (Get
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the OIDC callback handler issues a full
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, the `DELETE /api/v1/projects/:pr
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.2, the `LinkSharing.ReadAll()` meth
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, the `DownloadImage` function in
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, `TaskAttachment.ReadOne()` queri
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, the `GET /api/v1/projects/:proje
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, when the Vikunja API returns tas
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, the migration helper functions `
Vikunja is an open-source self-hosted task management platform. Starting in version 0.18.0 and prior to version 2.2.1, w
Vikunja is an open-source self-hosted task management platform. Starting in version 1.0.0-rc0 and prior to version 2.2.0
Vikunja is an open-source self-hosted task management platform. Starting in version 0.13 and prior to version 2.2.1, any
Vikunja is an open-source self-hosted task management platform. Starting in version 0.21.0 and prior to version 2.2.0, t
Vikunja is an open-source self-hosted task management platform. Starting in version 0.21.0 and prior to version 2.2.0, t
Vikunja is an open-source self-hosted task management platform. Starting in version 0.21.0 and prior to version 2.2.0, t
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.0, a flaw in Vikunja’s password res
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.0, the Caldav endpoint allows login
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.0, an authenticated user can read a
Vikunja is an open-source self-hosted task management platform. Starting in version 0.20.2 and prior to version 2.2.0, t
Vikunja is an open-source self-hosted task management platform. Starting in version 0.8 and prior to version 2.2.0, unau
Vikunja is an open-source self-hosted task management platform. Versions prior to 2.1.0 have a business logic vulnerabil
Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the restoreConfig function in vi
Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to
Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to
Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, a reflected HTML injection vulne
Vikunja is a todo-app to organize your life. Prior to 1.1.0, TaskGlanceTooltip.vue temporarily creates a div and sets th
Frequently Asked Questions
How many CVEs affect Vikunja?
Vikunja has 35 CVE records in our database, including 3 critical and 10 high severity vulnerabilities.
What are the most severe Vikunja vulnerabilities?
Vikunja has 3 critical severity (CVSS 9.0+) and 10 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Vikunja vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Vikunja products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Vikunja Vulnerabilities
CyberStrike scans your infrastructure for Vikunja vulnerabilities and provides real-time remediation guidance.
Get Started