Vulners
Lucene search
2 matches found
SUSE CVE-2026-33679
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, the DownloadImage function in pkg/utils/avatar.go uses a bare http.Client with no SSRF protection when downloading user avatar images from the OpenID Connect picture claim URL. An attacker who controls their...
7.4CVSS6AI score0.00395EPSS
Exploits1References3
CVE-2026-33679
Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, the DownloadImage function in pkg/utils/avatar.go uses a bare http.Client with no SSRF protection when downloading user avatar images from the OpenID Connect picture claim URL. An attacker who controls their...
6.4CVSS5.9AI score0.00395EPSS
Exploits1References4Affected Software1
20