Vikunja has a project duplication bypasses write-permission check on the target parent project
Moderate severity
GitHub Reviewed
Published
Jul 19, 2026
in
go-vikunja/vikunja
•
Updated Aug 28, 2026
Give feedback on Dependabot alerts