Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 04:49:04 +0000 CVE-2026-33473 — Vikunja has TOTP Reuse During Validity Window https://cve.radiocsirt.org/vuln/cve-2026-33473 <p><strong>Affected:</strong> go-vikunja vikunja</p> <p>Vikunja is an open-source self-hosted task management platform. Starting in version 0.13 and prior to version 2.2.1, any user that has enabled 2FA can have their TOTP reused during the standard 30 second validity window. Version 2.2.1 patches the issue.</p> <p><strong>Affected:</strong> go-vikunja vikunja</p> <p>Vikunja is an open-source self-hosted task management platform. Starting in version 0.13 and prior to version 2.2.1, any user that has enabled 2FA can have their TOTP reused during the standard 30 second validity window. Version 2.2.1 patches the issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-33473