EUVD-2026-119387

Vikunja before 2.7.1 contains an information exposure vulnerability that allows log readers to obtain link-share hashes because the request logger records the raw URI of the /shares/:share/auth route. Attackers with access to Vikunja or reverse proxy access logs can reuse non-expiring,...

CVE-2026-123502

Vikunja versions before 2.7.1 are vulnerable to an information exposure vulnerability because the request logger records the raw URI of the /shares/:share/auth route. An attacker with access to Vikunja or reverse proxy access logs can retrieve link-share hashes . These hashes can be reused to obt...

PT-2026-139783

Vikunja before 2.7.1 contains an information exposure vulnerability that allows log readers to obtain link-share hashes because the request logger records the raw URI of the /shares/:share/auth route. Attackers with access to Vikunja or reverse proxy access logs can reuse non-expiring,...

CVE-2026-123502: go-vikunja vikunja: Vikunja before 2.7.1 contains an information exposure vulnerability that allows log readers to obtain link-share hashes…

Vikunja before 2.7.1 contains an information exposure vulnerability that allows log readers to obtain link-share hashes because the request logger records the raw URI of the /shares/:share/auth route. Attackers with access to Vikunja or reverse proxy access logs can reuse non-expiring,...