github.com/go-vikunja/vikunja vulnerabilities
CVEs whose affected-version data names the github.com/go-vikunja/vikunja package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-m4vj-wr5q-cmvrHigh· 7.5Duplicate Advisory: Vikunja: Every /api/v2 pre-auth endpoint is unthrottled on a stock install while its /api/v1 twin is rate limited
Duplicate Advisory: Vikunja: Every /api/v2 pre-auth endpoint is unthrottled on a stock install while its /api/v1 twin is rate limited
▾ Twilightgo-vikunja · github.com/go-vikunja/vikunjavia GHSA
GHSA-p4h8-xg7f-xqrcHigh· 6.5Duplicate Advisory: Vikunja: Denial of service via decompression bomb in the data import
Duplicate Advisory: Vikunja: Denial of service via decompression bomb in the data import
▾ Twilightgo-vikunja · github.com/go-vikunja/vikunjavia GHSA