← All credits
https://github.com/lunny
7 vulnerability records and advisories credit this contributor.
CVE-2026-117649
Gitea private issue disclosure through issue dependency timeline events
CVE-2026-117685
Gitea public-only package token access to private OCI blobs
CVE-2026-119533
Gitea private pull request disclosure on project boards
CVE-2026-119625
Gitea user and organization feed token scope bypass
CVE-2026-118394
Gitea OAuth2 userinfo private group disclosure to public-only tokens
CVE-2026-73804
Gitea API token scope escalation through HTTP signatures
CVE-2026-95106
Gitea review and execution mismatch through duplicate tree entries