CVE-2026-91970 in Vikunja
Résumé
par MITRE • 15/09/2026
Vikunja versions before 2.6.0 contain a resource exhaustion vulnerability in the Planka migrator that fails to enforce aggregate memory budgets during migration jobs. Authenticated attackers can submit migration requests pointing to attacker-controlled servers advertising numerous size-compliant attachments, exhausting worker memory and causing denial of service for all users.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.