kanboard
Dashboards & Home PagesKanban project management software
Features
- Project management using the Kanban methodology
- Simple web‑based interface for task boards
- Supports custom columns, cards, and swimlanes
Recent releases
View all 5 releases →
v1.2.52
Security relevant
Security fixes
- Timing-safe comparisons for API token validation
- Parameterized queries for task operations
Full changelog
- Enforce comment visibility rules for public and unauthenticated users:
- Restricted comments are no longer exposed in public task views.
- Users cannot create comments with a visibility level higher than their role.
- Revoke public access tokens for inactive users.
- Use timing-safe comparisons (
hash_equals) for API and webhook token validation to mitigate timing attacks. - Replace raw SQL interpolation with parameterized queries in:
- Task queries (
TaskFinderModel) - iCalendar export conditions
- Task queries (
- Validate task ownership in bulk operations:
- Ensure tasks belong to the specified project before applying bulk changes.
v1.2.51
Security relevant
Security fixes
- SSRF protection for webhook notifications
- Unsafe deserialization prevention
- Parameter injection restrictions
v1.2.50
Security relevant
Security fixes
- Authorization checks added in controllers
- Parsedown safe mode enabled
- CSRF protection for roles
v1.2.49
Security relevant
Security fixes
- LDAP injection vulnerability
- Protocol-relative URL redirect prevention
Notable features
- TRUSTED_PROXY_NETWORKS configuration option
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Community & Support
Tracked by
1
person tracking
People also track
pocket-id
1 tracking
Kyoo
1 tracking
Superset
1 tracking
Claude Squad
1 tracking
CodexMonitor
1 tracking
LightRAG
1 tracking
