From Dev.to
CVE-2026-68582: How a Share Link Lets You Read Someone Else's Kanban Board (Vikunja BOLA)
Target: Vikunja, a self-hosted, open-source to-do and kanban app (Go backend) Affected: 0.24.0 through 2.3.0 → fixed in 2.4.0 Class: BOLA / Broken Object Level Authorization (CWE-639, CWE-863) Endpo...