Threats tagged 'ghsa-pvhp-x32p-w9mc'

Vikunja versions from 0.24.0 up to but not including 2.7.1 contain a nil pointer dereference vulnerability. This flaw allows project administrators to disrupt project views by saving a filter-mode bucket configuration with a null filter. The vulnerability causes the validateProjectViewFilters function to skip nil entries, leading to panics in kanban and task collection code during view reads, which results in HTTP 500 errors for all project members.