Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 20:53:16 +0000 CVE-2026-123496 — Vikunja veans before 2.7.1 Symlink Following in veans init https://db.gcve.eu/vuln/cve-2026-123496 <p><strong>Affected:</strong> go-vikunja vikunja</p> <p>Vikunja veans before 2.7.1 contains a symlink following vulnerability that allows attackers to make veans init write files outside the repository via crafted repo symlinks. Attackers can ship symlinked .veans.yml, .claude, or .opencode entries to overwrite user files like ~/.bashrc or install veans hooks and plugins globally.</p> <p><strong>Affected:</strong> go-vikunja vikunja</p> <p>Vikunja veans before 2.7.1 contains a symlink following vulnerability that allows attackers to make veans init write files outside the repository via crafted repo symlinks. Attackers can ship symlinked .veans.yml, .claude, or .opencode entries to overwrite user files like ~/.bashrc or install veans hooks and plugins globally.</p> https://db.gcve.eu/vuln/cve-2026-123496