Detections
Analytics
SCA: security update for code.vikunja.io/api (GHSA-p4r4-8cxw-pjx7)
high Tenable Cloud Security Plugin ID 474068
Description
Duplicate Advisory: Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)Solution
There is no known solution at this time.See Also
Plugin Details
Severity: High
ID: 474068
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 10/10/2026
Updated: 10/10/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 8/2/2026
Vulnerability Publication Date: 8/2/2026
Reference Information
cwe: CWE-639