|
cve-2026-58433
|
N/A
|
Team-repository linking endpoint bypasses the RepoAdmi…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:50.794Z |
2026-08-14T19:14:15.445Z |
|
cve-2026-58432
|
N/A
|
Missing Authorization and Authorization Bypass Through…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:50.340Z |
2026-08-14T19:16:44.337Z |
|
cve-2026-58431
|
N/A
|
Public-only API token restriction is not enforced on t…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:49.923Z |
2026-08-14T17:24:33.805Z |
|
cve-2026-58429
|
N/A
|
Public-Only Personal access tokens scope bypass in Org…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:49.484Z |
2026-08-14T17:28:06.995Z |
|
cve-2026-58428
|
N/A
|
Release attachment extension allowlist bypass via web …
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:49.015Z |
2026-08-14T17:29:36.605Z |
|
cve-2026-58427
|
N/A
|
Private org member list leaked via /members API endpoi…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:48.425Z |
2026-08-14T17:30:58.822Z |
|
cve-2026-58425
|
N/A
|
OAuth token introspection returns metadata of tokens i…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:47.902Z |
2026-08-14T17:33:14.150Z |
|
cve-2026-58420
|
N/A
|
Local File Inclusion via file:// URI in Migration Restore
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:47.452Z |
2026-08-14T17:43:31.912Z |
|
cve-2026-58417
|
N/A
|
REST API exposes organization membership of private or…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:47.004Z |
2026-08-14T17:34:38.917Z |
|
cve-2026-58416
|
N/A
|
Fork-PR Actions task can read a third private reposito…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:46.534Z |
2026-08-13T18:37:50.990Z |
|
cve-2026-58314
|
N/A
|
Two SSRF findings in Gitea 1.26.2
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:46.109Z |
2026-08-14T17:35:42.167Z |
|
cve-2026-57897
|
N/A
|
Cross-Repo Information Disclosure via Org-Level Action…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:45.669Z |
2026-08-13T18:38:41.211Z |
|
cve-2026-57894
|
N/A
|
Repository Migration Follows Git HTTP Redirects After …
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:45.204Z |
2026-08-14T17:36:49.613Z |
|
cve-2026-57886
|
N/A
|
Cross-repository issue/comment attachment re-linking c…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:44.704Z |
2026-08-14T17:38:03.588Z |
|
cve-2026-56755
|
N/A
|
Denial of Service (CPU & Memory Exhaustion) via O(N^2)…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:44.222Z |
2026-08-13T18:38:14.713Z |
|
cve-2026-56750
|
N/A
|
Gitea Remember-Me Token Theft Not Invalidating Attacke…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:43.788Z |
2026-08-14T19:18:19.475Z |
|
cve-2026-56657
|
N/A
|
Gitea SSH Key Parser Denial of Service
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:43.329Z |
2026-08-13T18:48:49.731Z |
|
cve-2026-56654
|
N/A
|
Privilege Escalation via Access Token Scope Escalation…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:42.890Z |
2026-08-14T19:19:59.583Z |
|
cve-2026-56443
|
N/A
|
Token public-only scope bypassed on Limited-visibility…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:42.458Z |
2026-08-14T20:05:01.023Z |
|
cve-2026-55987
|
N/A
|
OAuth2 sign-in reactivates an administrator-deactivate…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:42.020Z |
2026-08-14T20:06:36.724Z |
|
cve-2026-55986
|
N/A
|
Email Management API Bypasses ManageCredentials Featur…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:41.580Z |
2026-08-14T18:29:12.328Z |
|
cve-2026-55984
|
N/A
|
Null Pointer Dereference in AddTime API Causes Authent…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:40.619Z |
2026-08-14T17:40:25.217Z |
|
cve-2026-55982
|
N/A
|
OIDC userinfo Endpoint Returns Identity Claims Without…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:40.177Z |
2026-08-14T17:42:09.138Z |
|
cve-2026-54481
|
N/A
|
Internal API HTTP client hardcodes InsecureSkipVerify:…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:39.761Z |
2026-08-14T17:44:39.896Z |
|
cve-2026-50105
|
N/A
|
RSS/Atom feed handlers bypass API-token scope & public…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:39.331Z |
2026-08-14T20:08:02.697Z |
|
cve-2026-42931
|
N/A
|
Denial of Service via Unbounded io.ReadAll in NPM Pack…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:38.891Z |
2026-08-13T19:28:56.414Z |
|
cve-2026-23603
|
N/A
|
Blind SSRF in OAuth2 avatar synchronization via unvali…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:38.451Z |
2026-08-14T17:45:37.628Z |
|
cve-2026-59109
|
8.8 (v3.1)
8.7 (v4.0)
|
Zalktis: SQL injection via partner-controlled fields i…
|
Zalktis Programmas (SIA "Zalktis Programmas")
|
Zalktis
|
2026-08-13T16:40:01.751Z |
2026-08-14T17:46:15.377Z |
|
cve-2026-73266
|
7.1 (v3.1)
|
Clusterclaims-controller: confused deputy: tenant-cont…
|
Red Hat
|
multicluster engine for Kubernetes 2.1
|
2026-08-13T16:36:45.097Z |
2026-09-08T12:15:14.168Z |
|
cve-2026-13051
|
N/A
|
Form::Processor::Field::HtmlArea versions from 0.06 th…
|
|
|
2026-08-13T16:28:50.242Z |
2026-08-14T17:47:10.542Z |