Threats tagged 'ghsa-w5pw-69q7-rf8x'

Vikunja versions prior to 2.7.1 have a vulnerability where authenticated users can cause uncontrolled resource consumption by requesting avatars at many distinct sizes. This can exhaust server memory, leading to the API process being terminated due to out-of-memory conditions.