Detections
Analytics
SCA: security update for code.vikunja.io/api (GHSA-pjr3-86v4-5p7w)
high Tenable Self-Hosted Container Security Plugin ID 474078
Description
Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.0)Solution
There is no known solution at this time.See Also
Plugin Details
Severity: High
ID: 474078
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 10/10/2026
Updated: 10/10/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/9/2026
Vulnerability Publication Date: 10/9/2026