EUVD-2026-78650

Vikunja: Denial of service via decompression bomb in the data import...

CVE-2026-91979

Vikunja before 2.6.0 fails to limit archive expansion during data import, allowing authenticated users to cause denial of service. Attackers can upload highly compressed files that expand to tens of gigabytes in memory and disk, exhausting server resources and crashing the instance...

CVE-2026-91979

Vikunja before 2.6.0 fails to limit archive expansion during data import, allowing authenticated users to cause denial of service. Attackers can upload highly compressed files that expand to tens of gigabytes in memory and disk, exhausting server resources and crashing the instance...

CVE-2026-91979

Vikunja (a self-hosted task management application) prior to 2.6.0 does not limit archive expansion during data import. An authenticated attacker can upload a highly compressed file that expands to tens of gigabytes in memory and disk, exhausting server resources and crashing the instance (denial...

PT-2026-92093

Name of the Vulnerable Software and Affected Versions Vikunja versions prior to 2.6.0 Description Authenticated users can cause a denial of service during data import because the system fails to limit archive expansion. An attacker can upload highly compressed files that expand to tens of gigabyt...

CVE-2026-91979: Uncontrolled Resource Consumption

Vikunja before 2.6.0 fails to limit archive expansion during data import, allowing authenticated users to cause denial of service. Attackers can upload highly compressed files that expand to tens of gigabytes in memory and disk, exhausting server resources and crashing the instance...

EUVD-2006-1461

Malware in sbrugna...

IBM Concert 安全漏洞

IBM Concert is a new tool from International Business Machines IBM, Inc. that uses generative AI to help manage complex cloud-native applications. A security vulnerability exists in IBM Concert 1.0.5 and prior versions that stems from uncontrolled resource consumption when expanding archive files...