CVE Tools
Track your stack

Go-vikunja

66 CVEs tracked since 2026. Since Feb 2026, none of them reached CISA KEV.

Go-vikunja CVEs per month

Feb 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Go-vikunja CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0260
2026-03180
2026-04110
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-0880
2026-09130
2026-10100

Products

The products that kept showing up in Go-vikunja's monthly top three, with their CVEs summed over those months.

  1. Vikunja666 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Go-vikunja.

  1. CVE-2026-115507Vikunja 2.2.0 before 2.7.1 HTML Injection via Notification Email Header3.5
  2. CVE-2026-111922Vikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trusting Localhost Origins6.3
  3. CVE-2026-111921Vikunja 0.13.0 before 2.7.0 Incorrect Authorization in Link Share Deletion5.4
  4. CVE-2026-111920Vikunja 2.6.0 Broken Access Control via Inherited Project Permissions4.3
  5. CVE-2026-111919Vikunja 0.22.0 before 2.7.0 Improper Access Revocation via Webhooks6.5
  6. CVE-2026-111918Vikunja 1.0.0-rc0 before 2.7.0 Cross-Tenant Task Position Writes via Saved Filter Creation5.4
  7. CVE-2026-111917Vikunja 2.3.0 before 2.7.0 WebSocket Authentication Ignores Session Revocation6.5
  8. CVE-2026-62376Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access8.1
  9. CVE-2026-62367Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover—
  10. CVE-2026-57458Vikunja: Scoped API token can mint unrestricted OAuth session credentials8.1
  11. CVE-2026-91985Vikunja before 2.6.0 Privilege Escalation via Link Share Hash7.5
  12. CVE-2026-91984Vikunja before 2.6.0 Broken Object-Level Authorization via task-position4.3
  13. CVE-2026-91982Vikunja before 2.6.0 TOTP Secret Disclosure via API4.3
  14. CVE-2026-91983Vikunja before 2.6.0 API Token Scope Bypass via expand Parameter4.3
  15. CVE-2026-91981Vikunja before 2.6.0 User Enumeration via v2 API4.3

The record

Peak rank
#64 in Mar 2026
Busiest month shown
Mar 2026, 18 CVEs
Months with a KEV entry
0 since Feb 2026
Monthly snapshots
6 since 2026
Go-vikunja's full record, month by month