Detections
Analytics
SCA: security update for code.vikunja.io/api (GHSA-w2ch-4xgr-22ww)
high Tenable Cloud Security Plugin ID 474087
Description
Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removalSolution
Update the code.vikunja.io/api library and its related packages to version 2.6.0 or later.See Also
Plugin Details
Severity: High
ID: 474087
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 10/10/2026
Updated: 10/10/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/9/2026
Vulnerability Publication Date: 10/9/2026