https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-08T07:23:54.998555+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-123516 fkie_cve-2026-123516 2026-11-08T07:23:55.002810+00:00

Vikunja before 2.7.1 contains a resource exhaustion vulnerability in the vikunja-file ZIP importer that allows authenticated users to consume CPU and memory by uploading archives with excessive entries. Attackers can upload export ZIPs containing many empty or non-files/ entries that bypass the per-entry caps, forcing scanArchive to process every entry twice.

 https://db.gcve.eu/vuln/ghsa-5gjc-rq8x-g8fj GHSA-5gjc-rq8x-g8fj 2026-11-08T07:23:55.002970+00:00

Vikunja before 2.7.1 contains a resource exhaustion vulnerability in the vikunja-file ZIP importer that allows authenticated users to consume CPU and memory by uploading archives with excessive entries. Attackers can upload export ZIPs containing many empty or non-files/ entries that bypass the per-entry caps, forcing scanArchive to process every entry twice.