vikunja/pkg/modules
kolaente 12dca5f0b0 fix(restore): reject zip entries with path traversal sequences
Validate all zip entry names during restore to reject entries
containing directory traversal sequences (e.g. ../../../pwned.txt).
This prevents a Zip Slip attack where a malicious archive could
write files outside the intended extraction directory.
2026-02-25 13:01:00 +01:00
..
auth fix: use caller's session in LDAP syncUserGroups to avoid nested transactions 2026-02-25 11:03:02 +01:00
avatar fix: use session-aware file creation to avoid nested transactions 2026-02-25 11:03:02 +01:00
background fix: use session-aware file creation to avoid nested transactions 2026-02-25 11:03:02 +01:00
dump fix(restore): reject zip entries with path traversal sequences 2026-02-25 13:01:00 +01:00
keyvalue feat: add keyvalue.Remember function 2025-07-17 16:19:13 +02:00
migration feat(cli): reorganize repair commands under unified 'vikunja repair' parent (#2300) 2026-02-25 11:50:09 +00:00