https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 20:48:57 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-123524 <p>Vikunja from 0.23.0 before 2.7.1 contains an information disclosure vulnerability that allows project collaborators with write access to read tasks from inaccessible projects by registering webhooks. Because webhook payloads are built with the triggering user&#39;s permissions, attackers receive related_tasks titles, descriptions and metadata from private projects whenever another user modifies a linked task.</p> <p>Vikunja from 0.23.0 before 2.7.1 contains an information disclosure vulnerability that allows project collaborators with write access to read tasks from inaccessible projects by registering webhooks. Because webhook payloads are built with the triggering user&#39;s permissions, attackers receive related_tasks titles, descriptions and metadata from private projects whenever another user modifies a linked task.</p> https://db.gcve.eu/vuln/fkie_cve-2026-123524 https://db.gcve.eu/vuln/ghsa-h94h-5hrj-rqqg <p>Vikunja from 0.23.0 before 2.7.1 contains an information disclosure vulnerability that allows project collaborators with write access to read tasks from inaccessible projects by registering webhooks. Because webhook payloads are built with the triggering user&#39;s permissions, attackers receive related_tasks titles, descriptions and metadata from private projects whenever another user modifies a linked task.</p> <p>Vikunja from 0.23.0 before 2.7.1 contains an information disclosure vulnerability that allows project collaborators with write access to read tasks from inaccessible projects by registering webhooks. Because webhook payloads are built with the triggering user&#39;s permissions, attackers receive related_tasks titles, descriptions and metadata from private projects whenever another user modifies a linked task.</p> https://db.gcve.eu/vuln/ghsa-h94h-5hrj-rqqg