Lucene search
+L

4 matches found

osv_go
osv_go
•added 2026/02/27 2:17 a.m.•28 views

GO-2026-4556 Vikunja has Path Traversal in CLI Restore in code.vikunja.io/api

Vikunja has Path Traversal in CLI Restore in code.vikunja.io/api...

7.2CVSS8.1AI score0.00983EPSS
SaveExploits1References4
osv_ghsa
osv_ghsa
•added 2026/02/26 3:23 p.m.•42 views

GHSA-42WG-38GX-85RH Vikunja has Path Traversal in CLI Restore

Summary Path Traversal Zip Slip and Denial of Service DoS vulnerability discovered in the Vikunja CLI's restore functionality. Details The restoreConfig function in vikunja/pkg/modules/dump/restore.go of the https://github.com/go-vikunja/vikunja/tree/main repository fails to sanitize file paths...

7.2CVSS8.1AI score0.00983EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2026/02/26 3:23 p.m.•32 views

Vikunja has Path Traversal in CLI Restore

Summary Path Traversal Zip Slip and Denial of Service DoS vulnerability discovered in the Vikunja CLI's restore functionality. Details The restoreConfig function in vikunja/pkg/modules/dump/restore.go of the https://github.com/go-vikunja/vikunja/tree/main repository fails to sanitize file paths...

7.2CVSS8.1AI score0.00983EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2026/02/25 9:40 p.m.•53 views

CVE-2026-27819 Vikunja has Path Traversal in CLI Restore

Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the restoreConfig function in vikunja/pkg/modules/dump/restore.go of the go-vikunja/vikunja repository fails to sanitize file paths within the provided ZIP archive. A maliciously crafted ZIP can bypass the...

7.2CVSS0.00983EPSS
SaveExploits1References2
Rows per page
Query Builder