Lucene search
K

4 matches found

OSV
OSV
added 2026/02/27 2:17 a.m.3 views

GO-2026-4556 Vikunja has Path Traversal in CLI Restore in code.vikunja.io/api

Vikunja has Path Traversal in CLI Restore in code.vikunja.io/api...

7.2CVSS5.8AI score0.00042EPSS
Exploits1References4
OSV
OSV
added 2026/02/26 3:23 p.m.6 views

GHSA-42WG-38GX-85RH Vikunja has Path Traversal in CLI Restore

Summary Path Traversal Zip Slip and Denial of Service DoS vulnerability discovered in the Vikunja CLI's restore functionality. Details The restoreConfig function in vikunja/pkg/modules/dump/restore.go of the https://github.com/go-vikunja/vikunja/tree/main repository fails to sanitize file paths...

7.2CVSS5.8AI score0.00042EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2026/02/26 3:23 p.m.7 views

Vikunja has Path Traversal in CLI Restore

Summary Path Traversal Zip Slip and Denial of Service DoS vulnerability discovered in the Vikunja CLI's restore functionality. Details The restoreConfig function in vikunja/pkg/modules/dump/restore.go of the https://github.com/go-vikunja/vikunja/tree/main repository fails to sanitize file paths...

7.2CVSS5.8AI score0.00042EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/02/25 9:40 p.m.23 views

CVE-2026-27819 Vikunja has Path Traversal in CLI Restore

Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the restoreConfig function in vikunja/pkg/modules/dump/restore.go of the go-vikunja/vikunja repository fails to sanitize file paths within the provided ZIP archive. A maliciously crafted ZIP can bypass the...

7.2CVSS0.00042EPSS
Exploits1References2
Rows per page
Query Builder