go-vikunja vikunja

• CVE-2026-27819 High 7.2 Vikunja has Path Traversal in CLI Restore 0.8%
• CVE-2026-27616 High 7.3 Vikunja Vulnerable to Stored Cross-Site Scripting (XSS) via Unsanitized SVG Attachment Upload Leading to Token Exposure 0.5%
• CVE-2026-27575 Critical 9.1 Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change 0.5%
• CVE-2026-27116 Medium 6.1 Vikunja has Reflected HTML Injection via filter Parameter in Projects Module 0.3%
• CVE-2026-25935 High 8.6 Vikunja Affected by XSS Via Task Preview 0.3%