Threats tagged 'ghsa-7g8v-77fp-g6gv'

Vikunja versions prior to 2.7.1 have a vulnerability in their Trello, Todoist, and Microsoft To Do migration importers where memory allocation is unbounded. Authenticated users can trigger migrations that cause excessive memory use by referencing large attachments or oversized API responses, leading to memory exhaustion and crashing the shared API process.