Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/09 8:53 p.m.•3 views

Vikunja: Unbounded CSV row cardinality permits API process termination

Unbounded CSV row cardinality permits API process termination Summary The authenticated v2 CSV migration route caps upload bytes but not parsed row cardinality. It reads every record into a string and then materializes a full task object for every row before insertion. Two million one-cell rows f...

7.1CVSS6.1AI score0.00436EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder