CVE-2026-33474 in go-vikunja vikunja
Résumé (Anglaise)
Vikunja is an open-source self-hosted task management platform. Starting in version 1.0.0-rc0 and prior to version 2.2.0, unbounded image decoding and resizing during preview generation lets an attacker exhaust CPU and memory with highly compressed but extremely large-dimension images. Version 2.2.0 patches the issue.
Responsable
GitHub_M
Réserver
20/03/2026
Divulgation
24/03/2026
Entrées
| ID | Vulnérabilité | CWE | Base | Temp | 0day | Aujourd'hui | Exp | KEV | EPSS | CTI | Con | CVE |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 352805 | go-vikunja déni de service | 400 | 5.4 | 5.3 | $0-$5k | $0-$5k | Non défini | 0.00042 | 0.00 | Correctif officiel | CVE-2026-33474 |