Vulnerability in Kanboard

CVE-2026-29056

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint (`UserInviteController::register()`) accepts all POST parameters and passes them to `UserModel::create()`…

Vulnerability class: Mass Assignment

EPSS: 0.003 (50.9th percentile) — read the EPSS interpretation.