EUVD-2026-62457

Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure...