Team IT Security (TSEC) Nachrichtenportal Logo

🔧 CVE-2026-25935: Vikunja XSS: When 'Just Looking' Gets You Pwned


Nachrichtenbereich: 🔧 Programmierung
🔗 Quelle: dev.to

Vikunja XSS: When 'Just Looking' Gets You Pwned



Vulnerability ID: CVE-2026-25935
CVSS Score: 8.6
Published: 2026-02-11


A high-severity Cross-Site Scripting (XSS) vulnerability was discovered in... [Weiterlesen]

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🔧 Taiga vs Vikunja: Self-Hosted Project Management


📈 504.85 Punkte
🔧 Programmierung

🔧 CVE-2026-25935: Vikunja XSS: When 'Just Looking' Gets You Pwned


📈 417.33 Punkte
🔧 Programmierung

🔧 PM Tools for Remote Dev Teams 2026: APIs, GitHub Integration, and Self-Host


📈 350.89 Punkte
🔧 Programmierung

🔧 CVE-2026-27575: The Zombie Session: Breaking Vikunja's Auth with CVE-2026-27575


📈 329.01 Punkte
🔧 Programmierung

🔧 Open-Source Productivity Apps in 2025: A Careful Comparison


📈 284.45 Punkte
🔧 Programmierung

🔧 Open-Source Productivity Apps in 2025: A Careful Comparison


📈 240.69 Punkte
🔧 Programmierung

🔧 Building an AI task generator for Vikunja that doesn't trust itself


📈 197.73 Punkte
🔧 Programmierung

🐧 Download der Woche: Vikunja


📈 196.93 Punkte
🐧 Server

🔧 My Top 5 Self-Hosted Tools Running on My Home Server (via Docker)


📈 132.88 Punkte
🔧 Programmierung

🕵️ CVE-2026-27819 | go-vikunja up to 1.x ZIP restore.go restoreConfig path traversal (GHSA-42wg-38gx-85rh)


📈 131.28 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-25935 | go-vikunja up to 1.0.x TaskGlanceTooltip.vue cross site scripting (GHSA-m4g2-2q66-vc9v)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-28268 | go-vikunja up to 2.0.x Authentication Control cleanup (EUVD-2026-9064)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-27616 | go-vikunja up to 1.x SVG File Parser cross site scripting (GHSA-7jp5-298q-jg98)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-27116 | go-vikunja up to 1.x Projects cross site scripting (GHSA-4qgr-4h56-8895)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-27575 | go-vikunja up to 1.x weak password (GHSA-3ccg-x393-96v8)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33668 | go-vikunja up to 2.2.0 improper authorization (GHSA-94xm-jj8x-3cr4 / EUVD-2026-14913)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33334 | go-vikunja up to 2.1.x code injection (GHSA-xh67-63q3-hf7g)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33668 | go-vikunja up to 2.2.0 improper authorization (GHSA-94xm-jj8x-3cr4 / EUVD-2026-14913)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33335 | go-vikunja up to 2.1.x improper authorization in handler for custom url scheme (GHSA-6q44-85gc-cjvf)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33677 | go-vikunja up to 2.2.0 /api/v1/projects/ basic_auth_user/basic_auth_password information disclosure (GHSA-7c2g-p23p-4jg3)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33676 | go-vikunja up to 2.2.0 API related_tasks authorization (GHSA-8cmm-j6c4-rr8v)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33474 | go-vikunja up to 2.1.x resource consumption (GHSA-wc83-79hj-hpmq)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33675 | go-vikunja up to 2.2.0 File Attachment helpers.go server-side request forgery (GHSA-g66v-54v9-52pr)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33473 | go-vikunja up to 2.2.0 improper authentication (GHSA-p747-qc5p-773r)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33336 | go-vikunja up to 2.1.x code injection (GHSA-83w9-9jf6-88vf)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33678 | go-vikunja up to 2.2.0 Attachments ReadOne authorization (GHSA-jfmm-mjcp-8wq2)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33700 | go-vikunja up to 2.2.0 /api/v1/projects/ authorization (GHSA-f95f-77jx-fcjc)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33679 | go-vikunja up to 2.2.0 Image Parser pkg/utils/avatar.go DownloadImage server-side request forgery (GHSA-g9xj-752q-xh63)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33680 | go-vikunja up to 2.2.1 LinkSharing.ReadAll improper authorization (GHSA-8hp8-9fhr-pfm9)


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33316 | go-vikunja up to 2.1.x Password Reset token ResetPassword access control


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33315 | go-vikunja up to 2.1.x Caldav Endpoint authentication bypass


📈 109.4 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2026-33313 | go-vikunja up to 2.1.x Task ID authorization


📈 109.4 Punkte
🕵️ Sicherheitslücken

🔧 Building Functional Selfhood in AI


📈 71.07 Punkte
🔧 Programmierung

🔧 Subscription Fatigue Got Me. 6 Open-Source Solutions Saved Me $150/Year.


📈 70.43 Punkte
🔧 Programmierung

🕵️ CVE-2026-29794 | vikunja up to 2.1.x Header X-Forwarded-For reliance on untrusted inputs in a security decision (GHSA-m547-hp4w-j6jx / EUVD-2026-13706)


📈 65.64 Punkte
🕵️ Sicherheitslücken