2 matches found
CVE-2026-35601
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV output generator builds iCalendar VTODO entries via raw string concatenation without applying RFC 5545 TEXT value escaping. User-controlled task titles containing CRLF characters break the iCalendar propert...
5.1CVSS8.5AI score0.00196EPSS
SaveExploits1References6
CVE-2026-35601: Improper Neutralization of CRLF Sequences
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV output generator builds iCalendar VTODO entries via raw string concatenation without applying RFC 5545 TEXT value escaping. User-controlled task titles containing CRLF characters break the iCalendar propert...
4.1CVSS8.6AI score0.00196EPSS
SaveExploits1References1
20