CVE-2026-91970

Vikunja versions prior to 2.6.0 are affected by a resource exhaustion vulnerability in the Planka migrator , which fails to enforce aggregate memory budgets during migration jobs. An authenticated attacker can submit migration requests pointing to attacker-controlled servers that advertise numero...