CVE-2026-29056

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint "UserInviteController::register" accepts all POST parameters and passes them to "UserModel::create" without filtering out the "role" field. An attacker who receives...