Threats tagged 'ghsa-hx3f-4c73-rjcc'

Vikunja versions prior to 2.7.1 have a vulnerability involving improper resource cleanup that causes full-data export archives to remain orphaned on disk after export operations or account deletions. Authenticated users can repeatedly trigger exports, leading to disk storage exhaustion. Additionally, personal data of deleted users is retained indefinitely due to this issue.