CVE-2026-33474
Vikunja Affected by DoS via Image Preview Generation
Résumé
Vikunja Affected by DoS via Image Preview Generation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Vikunja is an open-source self-hosted task management platform. Starting in version 1.0.0-rc0 and prior to version 2.2.0, unbounded image decoding and resizing during preview generation lets an attacker exhaust CPU and memory with highly compressed but extremely large-dimension images. Version 2.2.0 patches the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web vikunja.io