BIT-GITEA-2026-96594 Gitea repository media API stored XSS

The Gitea API endpoint GET /api/v1/repos/owner/repo/media/filepath wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by...

CVE-2026-96594

A flaw was found in Gitea. The repository media application programming interface API endpoint does not return appropriate content-type and disposition security headers when serving small files directly from a repository. An authenticated attacker with repository push access can commit a maliciou...

CVE-2026-96594 Gitea repository media API stored XSS

The Gitea API endpoint GET /api/v1/repos/owner/repo/media/filepath wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by...

CVE-2026-96594 Gitea repository media API stored XSS

The Gitea API endpoint GET /api/v1/repos/owner/repo/media/filepath wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by...

CVE-2026-96594

The Gitea repository media API endpoint GET /api/v1/repos/{owner}/{repo}/media/{filepath} is vulnerable to stored Cross-Site Scripting (XSS) . The root cause is that the API fails to return appropriate content-type and disposition security headers when serving small files (up to 1 KiB) stored dir...

CVE-2026-96594 Gitea repository media API stored XSS

The Gitea API endpoint GET /api/v1/repos/owner/repo/media/filepath wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by...

WordPress Jetpack plugin 3.2 - 16.1.2 - Missing Authorization on WPCOM Media API Attachment Parent vulnerability

WordPress Jetpack plugin 3.2 - 16.1.2 - Missing Authorization on WPCOM Media API Attachment Parent vulnerability discovered by Jetpack in WordPress Plugin Jetpack versions 16.1-16.1.2...

Astra Linux – Vulnerability in Chromium

In GetUserMedia in Google Chrome, before version 150.0.7871.115, a remote attacker who had compromised the renderer process was able to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), com.kurento.kmf:kmf-broker (4.3.0) +13 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (4.0.1.release)

org.springframework:spring-webmvc MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay =0.4, =4.1.0, =4.1.0, =4.1.0, =4.1.0,...

com.kurento.kmf:kmf-broker (4.3.0), com.kurento.kmf:kmf-content-api (>=4.1.0, <=4.3.0) +6 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.0.1.release)

org.springframework:spring-websocket MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.kurento.kmf:kmf-broker 4.3.0 - com.kurento.kmf:kmf-content-api =4.1.0,...

EUVD-2026-31885

An improper validation of the search parameter of the commedia files API endpoint leads to a path traversal vulnerability...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), com.kurento.kmf:kmf-broker (4.3.0) +13 more potentially affected by CVE-2026-22741 via org.springframework:spring-webmvc (4.0.1.release)

org.springframework:spring-webmvc MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay =0.4, =4.1.0, =4.1.0, =4.1.0, =4.1.0,...

CVE-2025-62614 BookLore Media API Authentication Bypass

BookLore is a self-hosted web app for organizing and managing personal book collections. In versions 1.8.1 and prior, an authentication bypass vulnerability in the BookMediaController allows any unauthenticated user to access and download book covers, thumbnails, and complete PDF/CBX page content...

PT-2025-33214 · Unknown · Softnwords Smm Api

Name of the Vulnerable Software and Affected Versions: softnwords SMM API versions through 6.0.30 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels in the SMM API. Recommendations: Update softnwords SMM API to a version...

Unrestricted File Upload

cockpit-hq/cockpit is vulnerable to Unrestricted File Upload. The vulnerability is due to an improper file upload checks within the /media/api POST endpoint which can be exploited to compromise the system's integrity, allowing unauthorized access or data manipulation...

CVE-2024-4825: Unrestricted Upload of File with Dangerous Type

A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure...

CVE-2024-4825

A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure...

Use After Free

Google Chrome is vulnerable to Use After Free. The vulnerability is due to improper memory management in the media API, which results in heap corruption via crafted HTML page...

Agentejo Cockpit Directory Traversal Vulnerability

Agentejo Cockpit is a management system for managing structured content on websites. A directory traversal vulnerability exists in Agentejo Cockpit version 0.6.2, which arises from a program that does not properly validate a file before performing operations on it. An attacker can exploit the...

CVE-2018-15540

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...