https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T03:49:49.838901+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-33473 CVE-2026-33473 — Vikunja has TOTP Reuse During Validity Window 2026-10-13T03:49:49.872154+00:00

Affected: go-vikunja vikunja

Vikunja is an open-source self-hosted task management platform. Starting in version 0.13 and prior to version 2.2.1, any user that has enabled 2FA can have their TOTP reused during the standard 30 second validity window. Version 2.2.1 patches the issue.