GHSA-FPRF-R6RV-XG99: GHSA-FPRF-R6RV-XG99: Cross-Tenant Task Position Recalculation in Vikunja
GHSA-FPRF-R6RV-XG99: Cross-Tenant Task Position Recalculation in Vikunja Vulnerability ID: GHSA-FPRF-R6RV-XG99 CVSS Score: 6.5 Published: 2026-10-09 A cross-tenant boundary breach vulnerability in Vikunja allows an authenticated user to trigger global task position recalculations across all tenant instances by creating a saved filter with an empty filter string payload. Creating a saved filter with an empty filter string in Vikunja triggers task position recalculation across all database tenants
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.