https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 21:56:41 +0000 https://db.gcve.eu/vuln/cve-2026-123510 <p><strong>Affected:</strong> go-vikunja vikunja</p> <p>Vikunja before 2.7.1 fails to re-anchor PluginsDir and LogPath to service.rootpath, allowing plugins to load from and logs to be written in the startup working directory. Local attackers able to write to that directory can plant plugins loaded into the server when plugins are enabled, or read misplaced logs including audit.log.</p> <p><strong>Affected:</strong> go-vikunja vikunja</p> <p>Vikunja before 2.7.1 fails to re-anchor PluginsDir and LogPath to service.rootpath, allowing plugins to load from and logs to be written in the startup working directory. Local attackers able to write to that directory can plant plugins loaded into the server when plugins are enabled, or read misplaced logs including audit.log.</p> https://db.gcve.eu/vuln/cve-2026-123510