Affected by GO-2026-4480 and 21 other vulnerabilities

GO-2026-4480: Vikunja Vulnerable to XSS Via Task Preview in code.vikunja.io/api

GO-2026-4551: Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change in code.vikunja.io/api

GO-2026-4552: Vikunja has Reflected HTML Injection via filter Parameter in its Projects Module in code.vikunja.io/api

GO-2026-4553: Vikunja: Stored XSS via Unsanitized SVG Attachment Upload Leads to Token Exposure in code.vikunja.io/api

GO-2026-4556: Vikunja has Path Traversal in CLI Restore in code.vikunja.io/api

GO-2026-4575: Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse in code.vikunja.io/api

GO-2026-4791: Vikunja has a Rate-Limit Bypass for Unauthenticated Users via Spoofed Headers in code.vikunja.io/api

GO-2026-4794: Vikunja has a 2FA Bypass via Caldav Basic Auth in code.vikunja.io/api

GO-2026-4795: Vikunja read-only users can delete project background images via broken object-level authorization in code.vikunja.io/api

GO-2026-4797: Vikunja has an IDOR in Task Comments Allows Reading Arbitrary Comments in code.vikunja.io/api

GO-2026-4798: Vikunja’s Improper Access Control Enables Bypass of Administrator-Imposed Account Disablement in code.vikunja.io/api

GO-2026-4805: Vikunja has TOTP Reuse During Validity Window in code.vikunja.io/api

GO-2026-4811: Vikunja Affected by DoS via Image Preview Generation in code.vikunja.io/api

GO-2026-4846: Vikjuna: Webhook BasicAuth Credentials Exposed to Read-Only Project Collaborators via API in code.vikunja.io/api

GO-2026-4847: Vikunja has Cross-Project Information Disclosure via Task Relations — Missing Authorization Check on Related Task Read in code.vikunja.io/api

GO-2026-4848: Vikjuna: Link Share Hash Disclosure via ReadAll Endpoint Enables Permission Escalation in code.vikunja.io/api

GO-2026-4849: Vikunja Allows Disabled/Locked User Accounts to Authenticate via API Tokens, CalDAV, and OpenID Connect in code.vikunja.io/api

GO-2026-4850: Vikunja has a Link Share Delete IDOR — Missing Project Ownership Check Allows Cross-Project Link Share Deletion in code.vikunja.io/api

GO-2026-4851: Vikunja has SSRF via Todoist/Trello Migration File Attachment URLs that Allows Reading Internal Network Resources in code.vikunja.io/api

GO-2026-4852: Vikjuna Bypasses Webhook SSRF Protections During OpenID Connect Avatar Download in code.vikunja.io/api

GO-2026-4853: Vikjuna: IDOR in Task Attachment ReadOne Allows Cross-Project File Access and Deletion in code.vikunja.io/api

GO-2026-4855: Vikunja: Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDOR in code.vikunja.io/api

events

package

v0.24.2 Latest Latest Go to latest Published: Aug 12, 2024 License: AGPL-3.0 Imports: 14 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

git.kolaente.de/vikunja/api

Links

Open Source Insights

Documentation ¶

Index ¶

func AssertDispatched(t *testing.T, event Event)
func Dispatch(event Event) error
func Fake()
func InitEvents() (err error)
func RegisterListener(name string, listener Listener)
func TestListener(t *testing.T, event Event, listener Listener)
type Event
type Listener

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func AssertDispatched ¶

func AssertDispatched(t *testing.T, event Event)

AssertDispatched asserts an event has been dispatched.

func Fake ¶

func Fake()

Fake sets up the "test mode" of the events package. Typically you'd call this function in the TestMain function in the package you're testing. It will prevent any events from being fired, instead they will be recorded and be available for assertions.

func InitEvents ¶

func InitEvents() (err error)

InitEvents sets up everything needed to work with events

func RegisterListener ¶

func RegisterListener(name string, listener Listener)

RegisterListener is used to register a listener when a specific event happens

func TestListener ¶ added in v0.18.0

func TestListener(t *testing.T, event Event, listener Listener)

TestListener takes an event and a listener and calls the listener's Handle method.

Types ¶

type Event ¶

type Event interface {
	Name() string
}

Event represents the event interface used by all events

type Listener ¶

type Listener interface {
	Handle(msg *message.Message) error
	Name() string
}

Listener represents something that listens to events

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL