Skip to content

Vikunja has a Link Share Delete IDOR — Missing Project Ownership Check Allows Cross-Project Link Share Deletion

Moderate severity GitHub Reviewed Published Mar 23, 2026 in go-vikunja/vikunja • Updated Mar 25, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts