CVE Tools
Track your stack

Go-vikunja

56 CVEs tracked since 2026. Since Feb 2026, none of them reached CISA KEV.

Go-vikunja CVEs per month

Feb 2026 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Go-vikunja CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0260
2026-03180
2026-04110
2026-05null or fewer
2026-06null or fewer
2026-07null or fewer
2026-0880
2026-09130

Products

The products that kept showing up in Go-vikunja's monthly top three, with their CVEs summed over those months.

  1. Vikunja565 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Go-vikunja.

  1. CVE-2026-91985Vikunja before 2.6.0 Privilege Escalation via Link Share Hash7.5
  2. CVE-2026-91984Vikunja before 2.6.0 Broken Object-Level Authorization via task-position4.3
  3. CVE-2026-91983Vikunja before 2.6.0 API Token Scope Bypass via expand Parameter4.3
  4. CVE-2026-91982Vikunja before 2.6.0 TOTP Secret Disclosure via API4.3
  5. CVE-2026-91981Vikunja before 2.6.0 User Enumeration via v2 API4.3
  6. CVE-2026-91980vikunja before 2.6.0 Team Enumeration via Project Share4.3
  7. CVE-2026-91979Vikunja before 2.6.0 Denial of Service via Decompression Bomb6.5
  8. CVE-2026-91973Vikunja before 2.6.0 Authentication Bypass via CalDAV BasicAuth7.5
  9. CVE-2026-91972Vikunja before 2.6.0 Authentication Bypass via Unthrottled API7.5
  10. CVE-2026-91971Vikunja before 2.6.0 Denial of Service via Avatar Upload6.5
  11. CVE-2026-91970Vikunja before 2.6.0 Resource Exhaustion via Planka Migration6.5
  12. CVE-2026-91968vikunja before 2.6.0 Denial of Service via unbounded filter recursion6.5
  13. CVE-2026-91969vikunja before 2.6.0 Resource Exhaustion via CSV Migration6.5
  14. CVE-2026-55067Vikunja: Authenticated cross-tenant kanban-bucket relocation via `project_view_id` mass-assignment5.0
  15. CVE-2026-55066Vikunja: Cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id7.1

The record

Peak rank
#64 in Mar 2026
Busiest month shown
Mar 2026, 18 CVEs
Months with a KEV entry
0 since Feb 2026
Monthly snapshots
5 since 2026
Go-vikunja's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store