Skip to content

Vikunja Allows Disabled/Locked User Accounts to Authenticate via API Tokens, CalDAV, and OpenID Connect

High severity GitHub Reviewed Published Mar 23, 2026 in go-vikunja/vikunja • Updated Mar 25, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts