GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
3 advisories
Vikunja has TOTP Reuse During Validity Window
Moderate
CVE-2026-33473
was published
for
code.vikunja.io/api
(Go)
Mar 20, 2026
Vikunja has a 2FA Bypass via Caldav Basic Auth
Moderate
CVE-2026-33315
was published
for
code.vikunja.io/api
(Go)
Mar 20, 2026
Vikunja has a Rate-Limit Bypass for Unauthenticated Users via Spoofed Headers
Moderate
CVE-2026-29794
was published
for
code.vikunja.io/api
(Go)
Mar 20, 2026
ProTip!
Advisories are also available from the
GraphQL API