VYPR

kaneo

by Usekaneo

CVEs (1)

  • CVE-2026-63104HigSep 22, 2026
    risk 0.46cvss 8.1epss 0.00

    Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by exploiting the bulk task endpoint that omits workspace…