Skip to content
OpenAdvisories

Package · Ubuntu

python-kanboard

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-25531

    Kanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects

    Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects, allowing authent…

    kanboard kanboard python-kanboard kanboard-cli Ubuntu
  • Medium 4.3
    CVE-2026-25530

    Kanboard is missing authorization check in getSwimlane API allows cross-project data access

    Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, the getSwimlane API method lacks project-level authorization, allowing authenticated users to access swimlane data from projects they cannot access. This vulnerability is …

    kanboard kanboard python-kanboard kanboard-cli Ubuntu
  • Medium 5.7
    CVE-2026-24885

    Kanboard Affected by Cross-Site Request Forgery (CSRF) via Content-Type Misconfiguration in Project Role Assignment

    Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a Cross-Site Request Forgery (CSRF) vulnerability exists in the ProjectPermissionController within the Kanboard application. The application fails to strictly enforce the …

    kanboard kanboard python-kanboard kanboard-cli Ubuntu