go-vikunja

Friday, October 9

• GitHub CVE-2026-68582
  Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)

  • go-vikunja vikunja
  • Critical
  • CVSS 9.3
  • EPSS 0.27%
  • Fixed version listed
  20:42 UTC