Kanboard vulnerabilities

CVEs whose affected-version data names the Kanboard package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-57862High· 8.5PoC

1mo ago

Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation

Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadeci…

▾ MidnightKanboard · KanboardEPSS 0.29%via CVEORG