CVE-2026-2205 | WeKan up to 8.20 Meteor Publication cards.js CardPubSubBleed information disclosure

A vulnerability classified as problematic was found in WeKan up to 8.20. This affects an unknown part of the file server/publications/cards.js of the component Meteor Publication Handler. Such manipulation leads to information disclosure.

This vulnerability is listed as CVE-2026-2205. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.