Skip to content
OpenAdvisories

Package · PyPI

openviking

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-22680

    OpenViking < 0.3.3 Missing Authorization via Task Polling

    OpenViking versions prior to 0.3.3 contain a missing authorization vulnerability in the task polling endpoints that allows unauthorized attackers to enumerate or retrieve background task metadata created by other users. Attackers can access the /api/v1/tasks …

    Volcengine OpenViking openviking PyPI