Login Request a demo
VI
Product
vikunja
by go-vikunja · last CVE Oct 22, 2026
66
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Vulnerabilities66In the news0Timeline
Severity mix
Critical 4High 21Medium 40Low 1
Severity
All severities66Critical4High21Medium40Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add vikunja to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-28268
9.8
1%
Feb 27
Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse
Affected: < 2.1.0
CVE-2026-33334
9.6
0%
Mar 24
Vikunja Desktop: Any frontend XSS escalates to Remote Code Execution due to nodeIntegration
Affected: >= 0.21.0, < 2.2.0
CVE-2026-34727
9.1
0%
Apr 10
Vikunja ahs a TOTP Two-Factor Authentication Bypass via OIDC Login Path
Affected: < 2.3.0
CVE-2026-27575
9.1
0%
Feb 25
Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change
Affected: < 2.0.0
Showing 4