Skip to content
OpenAdvisories

Vendor

kanbn

3 known vulnerabilities.

Products

kan 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-110628

    Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment

    Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255. When S3_ENDPOINT is unset, attackers can pass arbitrary url query parameters to f…

    kanbn kan
  • High 8.6
    CVE-2026-32255 Public exploit Scanner template EPSS 27%

    Kan is Vulnerable to Unauthenticated SSRF via Attachment Download Endpoint

    Kan is an open-source project management tool. In versions 0.5.4 and below, the /api/download/attatchment endpoint has no authentication and no URL validation. The Attachment Download endpoint accepts a user-supplied URL query parameter and passes it directly…

    kanbn kan