Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.6

TaskCanvas 1.4.0 Can Crash from Malicious Input

CVE-2020-37189 · published 8 months ago
Summary

A security weakness in TaskCanvas 1.4.0 allows hackers to crash the application by entering a very long piece of text into the registration form. This could cause the application to become unresponsive or shut down. To stay safe, consider updating to a newer version of TaskCanvas.

Original advisory text
TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer paylo...
TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration field to trigger an application crash.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
4.6 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-120Classic Buffer Overflow
Timeline
Published11 Feb 2026
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2020-37189 · NVD
Track software like this
Free during beta