CVE-2026-123511

Vikunja versions prior to 2.7.1 are susceptible to a resource exhaustion vulnerability (CWE-770) within the CalDAV implementation. Authenticated clients can exploit this by sending a PUT request containing VTODO entries with thousands of RELATED-TO properties . By repeating unknown related UIDs, ...

CVE-2026-123511 Vikunja before 2.7.1 Resource Exhaustion via CalDAV VTODO RELATED-TO Entries

Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated CalDAV clients to create unbounded dummy tasks by sending VTODOs with thousands of RELATED-TO properties. Attackers can repeat unknown related UIDs in a single PUT request to generate...

CVE-2026-35601: Improper Neutralization of CRLF Sequences

Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV output generator builds iCalendar VTODO entries via raw string concatenation without applying RFC 5545 TEXT value escaping. User-controlled task titles containing CRLF characters break the iCalendar propert...

[SECURITY] Fedora 31 Update: php-horde-Horde-Data-2.1.5-1.fc31

A data import and export API, with backends for: CSV TSV iCalendar vCard vNote vTodo...

[SECURITY] Fedora 30 Update: php-horde-Horde-Data-2.1.5-1.fc30

A data import and export API, with backends for: CSV TSV iCalendar vCard vNote vTodo...

Fedora: Security Advisory for php-horde-Horde-Data (FEDORA-2020-0248ad925e)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for php-horde-Horde-Data (FEDORA-2020-1e7cc91d55)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...