← All credits

Alardiians

2 vulnerability records and advisories credit this contributor.

CVE-2026-63288
A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer.
CVE-2026-28699
Gitea Basic Auth bypasses OAuth2 access token scopes