Skip to content
OpenAdvisories

Vendor

kanbn

3 known vulnerabilities.

Products

kan 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-32255 Public exploit Scanner template EPSS 27%

    Kan is Vulnerable to Unauthenticated SSRF via Attachment Download Endpoint

    Kan is an open-source project management tool. In versions 0.5.4 and below, the /api/download/attatchment endpoint has no authentication and no URL validation. The Attachment Download endpoint accepts a user-supplied URL query parameter and passes it directly…

    kanbn kan