Detections
Analytics
SCA: security update for code.vikunja.io/api (GHSA-phph-c358-5mwm)
high Tenable Cloud Security Plugin ID 474073
Description
Duplicate Advisory: Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts)Solution
There is no known solution at this time.See Also
Plugin Details
Severity: High
ID: 474073
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 10/10/2026
Updated: 10/10/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 9/15/2026
Vulnerability Publication Date: 9/15/2026
Reference Information
cwe: CWE-863