Vikunja has a Link Share Delete IDOR — Missing Project Ownership Check Allows Cross-Project Link Share Deletion
Moderate severity
GitHub Reviewed
Published
Mar 23, 2026
in
go-vikunja/vikunja
•
Updated Mar 25, 2026
Give feedback on Dependabot alerts