Detections
Analytics
SCA: security update for code.vikunja.io/api (GHSA-ccgq-fx7h-2v4c)
high Tenable Self-Hosted Container Security Plugin ID 474056
Description
Duplicate Advisory: Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via the unvalidated project_view_id in the task position endpoint (v1 and v2)Solution
There is no known solution at this time.See Also
Plugin Details
Severity: High
ID: 474056
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 10/10/2026
Updated: 10/10/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 9/15/2026
Vulnerability Publication Date: 9/15/2026
Reference Information
cwe: CWE-639