https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-08T08:05:19.022504+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-123511 fkie_cve-2026-123511 2026-11-08T08:05:19.023742+00:00

Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated CalDAV clients to create unbounded dummy tasks by sending VTODOs with thousands of RELATED-TO properties. Attackers can repeat unknown related UIDs in a single PUT request to generate thousands of task, relation, and event rows, bloating the database and overloading the event pipeline.

 https://db.gcve.eu/vuln/ghsa-fvq6-3pq9-7pfq GHSA-fvq6-3pq9-7pfq 2026-11-08T08:05:19.023812+00:00

Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated CalDAV clients to create unbounded dummy tasks by sending VTODOs with thousands of RELATED-TO properties. Attackers can repeat unknown related UIDs in a single PUT request to generate thousands of task, relation, and event rows, bloating the database and overloading the event pipeline.