{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"code.vikunja.io/api","cve_ids":["CVE-2026-33474"],"ecosystem":"Go","epss":0.00324,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wc83-79hj-hpmq","id":"tcs_01M5KGG8GWFXJF8C1E6QCQWEQ2","modified_at":"2026-03-23T18:45:23.233183Z","published_at":"2026-03-23T18:16:18Z","references":["https://osv.dev/vulnerability/GO-2026-4811","https://github.com/go-vikunja/vikunja/security/advisories/GHSA-wc83-79hj-hpmq"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GO-2026-4811","url":"https://osv.dev/vulnerability/GO-2026-4811"},{"source":"nvd","source_id":"CVE-2026-33474","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33474"}],"summary":"Vikunja Affected by DoS via Image Preview Generation in code.vikunja.io/api"}