P5Verified

CVE-2026-91969: code.vikunja.io/api = 2.5.0

CVE-2026-91969 affects code.vikunja.io/api. EPSS 0.00436 (percentile 0.35878), scored 2026-10-09. Affected range: = 2.5.0. Fixed version: 2.6.0.

Affected technology

code.vikunja.io/api · = 2.5.0
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

Maintainer confirmation requested A low-privileged remote user can terminate the API process and deny service to all users with a request far below the configured upload-byte limit.

Published 2026-10-09 22:09:43.605691+00:00

Product: code.vikunja.io/api
CCR priority: 0.1 /100 (P5)
EPSS: 0.00436 · percentile 0.35878 · 2026-10-09
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-09 22:06:25.045838+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-91969.html