Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:41:09 +0000 EUVD-2026-373150 https://cve.radiocsirt.org/vuln/euvd-2026-373150 EUVD-2026-373150 https://cve.radiocsirt.org/vuln/euvd-2026-373150 fkie_cve-2026-91971 https://cve.radiocsirt.org/vuln/fkie_cve-2026-91971 <p>Vikunja before 2.6.0 fails to apply pixel decode limits to avatar and project-background upload endpoints, allowing authenticated users to upload crafted images that decode to excessive pixel counts. Attackers can upload small images with extreme aspect ratios that consume significant CPU and memory during processing, causing denial of service through repeated or concurrent uploads.</p> <p>Vikunja before 2.6.0 fails to apply pixel decode limits to avatar and project-background upload endpoints, allowing authenticated users to upload crafted images that decode to excessive pixel counts. Attackers can upload small images with extreme aspect ratios that consume significant CPU and memory during processing, causing denial of service through repeated or concurrent uploads.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-91971 GHSA-69rj-q3v9-vffp https://cve.radiocsirt.org/vuln/ghsa-69rj-q3v9-vffp <p>Vikunja before 2.6.0 fails to apply pixel decode limits to avatar and project-background upload endpoints, allowing authenticated users to upload crafted images that decode to excessive pixel counts. Attackers can upload small images with extreme aspect ratios that consume significant CPU and memory during processing, causing denial of service through repeated or concurrent uploads.</p> <p>Vikunja before 2.6.0 fails to apply pixel decode limits to avatar and project-background upload endpoints, allowing authenticated users to upload crafted images that decode to excessive pixel counts. Attackers can upload small images with extreme aspect ratios that consume significant CPU and memory during processing, causing denial of service through repeated or concurrent uploads.</p> https://cve.radiocsirt.org/vuln/ghsa-69rj-q3v9-vffp