https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T20:53:18.658317+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123496 CVE-2026-123496 — Vikunja veans before 2.7.1 Symlink Following in veans init 2026-11-10T20:53:18.660291+00:00

Affected: go-vikunja vikunja

Vikunja veans before 2.7.1 contains a symlink following vulnerability that allows attackers to make veans init write files outside the repository via crafted repo symlinks. Attackers can ship symlinked .veans.yml, .claude, or .opencode entries to overwrite user files like ~/.bashrc or install veans hooks and plugins globally.