CVE-2026-27616
Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to upload SVG files as task attachments. SVG is an XML-based format that supports JavaScript execution through elements such as
More information : https://github.com/go-vikunja/vikunja/security/advisories/GHSA-7jp5-298q-jg98