Vikunja
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 37 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 11, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Vikunja 0.24.0 Broken Object Level Authorization via Link-Share Token
Vikunja - Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDOR
Vikunja's Scoped API tokens with projects.background permission can delete project backgrounds
Vikunja has a File Size Limit Bypass via Vikunja Import
Vikunja has an iCalendar Property Injection via CRLF in CalDAV Task Output
Vikunja has HTML Injection via Task Titles in Overdue Email Notifications
Vikunja has an Algorithmic Complexity DoS in Repeating Task Handler
Vikunja has Missing Authorization on CalDAV Task Read
Vikunja Affected by TOTP Brute-Force Due to Non-Functional Account Lockout
Vikunja has Broken Access Control on Label Read via SQL Operator Precedence Bug
Monitor Vikunja in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.