Vikunja 0.22.0 before 2.7.0 Improper Access Revocation via Webhooks

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-111919 · Microsoft / collected KEV context

EUVD-2026-103287

GHSA-276j-w3vx-r5jh

GHSA-hjx8-qv73-f7cm

GO-2026-6733

cve-program · CVE-2026-111919

• https://github.com/go-vikunja/vikunja/security/advisories/GHSA-hjx8-qv73-f7cm
• https://www.vulncheck.com/advisories/vikunja-0.22.0-before-2.7.0-improper-access-revocation-via-webhooks

euvd · EUVD-2026-103287

• https://github.com/go-vikunja/vikunja/security/advisories/GHSA-hjx8-qv73-f7cm
• https://www.vulncheck.com/advisories/vikunja-0.22.0-before-2.7.0-improper-access-revocation-via-webhooks

nvd · CVE-2026-111919

• https://github.com/go-vikunja/vikunja/security/advisories/GHSA-hjx8-qv73-f7cm
• https://www.vulncheck.com/advisories/vikunja-0.22.0-before-2.7.0-improper-access-revocation-via-webhooks

osv · GHSA-hjx8-qv73-f7cm

• https://github.com/go-vikunja/vikunja/security/advisories/GHSA-hjx8-qv73-f7cm
• https://github.com/go-vikunja/vikunja

osv · GO-2026-6733

• https://github.com/go-vikunja/vikunja/security/advisories/GHSA-hjx8-qv73-f7cm

No related operational record is retained in the current change model.