dev.to· Oct 10, 2026· by cverports

GHSA-G38J-7V97-X298: GHSA-G38J-7V97-X298: Missing Authorization Check in Vikunja CalDAV Task Relation Creation

Open Original Article ↗
GHSA-G38J-7V97-X298: Missing Authorization Check in Vikunja CalDAV Task Relation...
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#security#cve#cybersecurity#ghsa

More Writeups Like This

dev.to

GHSA-JF75-Q64Q-G65R: GHSA-jf75-q64q-g65r: NoSQL Query Manipulation and Partial Authentication Bypass in Waline Server

by cverports
dev.to/tag/cybersecurity

GHSA-4HV6-XC92-J86G: GHSA-4HV6-XC92-J86G: Insufficient Session Expiration in Vikunja WebSocket Authentication Pipeline

by CVE Reports
dev.to/tag/cybersecurity

GHSA-FPRF-R6RV-XG99: GHSA-FPRF-R6RV-XG99: Cross-Tenant Task Position Recalculation in Vikunja

by CVE Reports
dev.to/tag/cybersecurity

GHSA-HJX8-QV73-F7CM: GHSA-HJX8-QV73-F7CM: Incomplete Access Revocation Leading to Webhook Data Exfiltration in Vikunja

by CVE Reports