Read the docs

kanbn

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

kanbn records in CISA KEV

No kanbn vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-74122 CVE-2026-110628 · GHSA-8p5c-vr7c-5g49

Unauthenticated server-side request forgery in Kan download route

Priority MEDIUM 46

Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00425 Published 2026-10-14 No fix listed CWE-918
TI-2026-62541 CVE-2026-92802 · GHSA-frgf-wpx9-58c9

kan through 0.6.0 Authorization Bypass via GitHub Project Import

Priority LOW 24

kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing guests to create boards despite lacking board:create permission.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-09-16 No fix listed CWE-862
Open these records in search →