Skip to content
OpenAdvisories

Package · Go

code.vikunja.io/api

67 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-w2ch-4xgr-22ww

    Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal

    ## Summary Deleting a task relation only requires write access on the base task. Unlike relation creation, it does not verify that the caller can read the other task. A user with write access to one project can therefore delete relations whose other end lives…

    code.vikunja.io/api Go