VDB
GO-2026-4797
GO-2026-4797
PUBLISHED
Vikunja has an IDOR in Task Comments Allows Reading Arbitrary Comments in code.vikunja.io/api
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| code.vikunja.io | api | 0, 0 |
Timeline
- Mar 23, 2026 CVE Published
- Mar 23, 2026 CVE Updated