Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/09 8:57 p.m.•10 views

Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed

Summary A collaborator removed from a project keeps a live, automatic feed of that project's contents, because nothing on any revocation path deletes the webhook they created while they had access. Vikunja already has a revocation-cleanup routine that deletes other derived rows for exactly this...

5.5AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder