Threats tagged 'ghsa-qgpv-qrrx-2qgv'

Vikunja versions prior to 2.7.1 have a vulnerability that allows authenticated users to exhaust server memory by uploading multiple concurrent images. This uncontrolled resource consumption occurs during the decoding of avatar and background images, which can be exploited by sending many small, highly compressible PNG files decoded at very high resolutions, causing memory pressure or process termination.