Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 21:03:15 +0000 CVE-2026-123531 — Vikunja 1.0.0 before 2.7.1 Pagination Limit Bypass via page=0 Parameter https://db.gcve.eu/vuln/cve-2026-123531 <p><strong>Affected:</strong> go-vikunja vikunja</p> <p>Vikunja from 1.0.0 before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated users to bypass service.maxitemsperpage by sending page=0 to /api/v1 list endpoints. Attackers can self-register and repeatedly request page=0 to force unbounded SQL queries, memory materialisation, and per-row query fan-out, degrading availability for other users.</p> <p><strong>Affected:</strong> go-vikunja vikunja</p> <p>Vikunja from 1.0.0 before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated users to bypass service.maxitemsperpage by sending page=0 to /api/v1 list endpoints. Attackers can self-register and repeatedly request page=0 to force unbounded SQL queries, memory materialisation, and per-row query fan-out, degrading availability for other users.</p> https://db.gcve.eu/vuln/cve-2026-123531