📦 Vikunja

This vulnerability in Vikunja task management software allows attackers to compromise accounts through weak password policies and maintain persistent access even after password resets. All self-hosted...

This vulnerability in Vikunja allows attackers to overwrite arbitrary files on the host system by uploading a malicious ZIP archive during configuration restoration. It can also crash the application ...

Vikunja versions before 2.0.0 have a reflected HTML injection vulnerability in the Projects module's filter parameter. This allows attackers to inject malicious HTML elements like SVG phishing buttons...

This is a cross-site scripting (XSS) vulnerability in Vikunja todo application where malicious HTML/JavaScript can be injected into task descriptions. When users hover over affected tasks, the injecte...