Duplicate Advisory: Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wq92-8x3r-fm38. This link is maintained to preserve external references. Original Description Vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the Planka migrator that fails to enforc...

CVE-2026-91970

Vikunja versions prior to 2.6.0 are affected by a resource exhaustion vulnerability in the Planka migrator , which fails to enforce aggregate memory budgets during migration jobs. An authenticated attacker can submit migration requests pointing to attacker-controlled servers that advertise numero...

CVE-2025-39700

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: ignore migration request to invalid nodes damonmigratepages tries migration even if the target node is invalid. If users mistakenly make such invalid requests via DAMOSMIGRATEHOT,COLD action, the below kernel...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mm/damon/ops-common module not ignoring migration requests from invalid nodes...

CVE-2019-18904

A Uncontrolled Resource Consumption vulnerability in rmt of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Public Cloud 15-SP1, SUSE Linux Enterprise Module for Server Applications 15, SUSE Linu...