https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T20:49:01.320736+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-123496 fkie_cve-2026-123496 2026-11-10T20:49:01.322657+00:00

Vikunja veans before 2.7.1 contains a symlink following vulnerability that allows attackers to make veans init write files outside the repository via crafted repo symlinks. Attackers can ship symlinked .veans.yml, .claude, or .opencode entries to overwrite user files like ~/.bashrc or install veans hooks and plugins globally.

 https://db.gcve.eu/vuln/ghsa-5mwr-g4r9-hv44 GHSA-5mwr-g4r9-hv44 2026-11-10T20:49:01.322742+00:00

Vikunja veans before 2.7.1 contains a symlink following vulnerability that allows attackers to make veans init write files outside the repository via crafted repo symlinks. Attackers can ship symlinked .veans.yml, .claude, or .opencode entries to overwrite user files like ~/.bashrc or install veans hooks and plugins globally.