VDB

CVE-2026-33474

CVE-2026-33474 PUBLISHED CVSS 6.5 MEDIUM

Vikunja Affected by DoS via Image Preview Generation

EPSS 0.06% · 19.7th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.06%
19.7th percentile

Affected Products

VendorProductVersions
go-vikunjavikunja>= 1.0.0-rc0, < 2.2.0, >= 1.0.0-rc0, < 2.2.0, >= 1.0.0-rc0, < 2.2.0
vikunjavikunja1.0.0, 1.0.0, 1.0.0
code.vikunja.ioapi1.0.0-rc0, 1.0.0-rc0, 1.0.0-rc0

Timeline

  • Mar 20, 2026 CVE Published
  • Mar 22, 2026 Security Advisory
  • Mar 24, 2026 PoC Published
  • Mar 25, 2026 CVE Updated
  • Mar 25, 2026 EPSS Score
  • May 18, 2026 EPSS Score
  • May 19, 2026 EPSS Score
  • May 20, 2026 EPSS Score
  • May 21, 2026 EPSS Score
  • May 22, 2026 EPSS Score
  • May 23, 2026 EPSS Score
  • May 24, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›