CVE-2026-58426 Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write...

CVE-2026-58426 Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write...

EUVD-2026-41637

Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...

CVE-2026-27779

Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...

CVE-2026-27779 Gitea forwarded-proto handling allows public URL spoofing

Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...

CVE-2026-46466

creationtimestamp| type| source ---|---|--- 2026-07-03 18:25:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr6ay546f2g 2026-07-04 06:56:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpsi7ljojq2d...

CVE-2026-49814

creationtimestamp| type| source ---|---|--- 2026-07-03 18:11:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr5hfm6s62l 2026-07-04 09:07:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpspipehmc2d 2026-07-05 05:05:58+00:00| seen|...

CVE-2026-46465

creationtimestamp| type| source ---|---|--- 2026-07-03 18:01:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr4vd63442b 2026-07-04 06:48:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpshqqxkzc2n...

CVE-2026-26145

creationtimestamp| type| source ---|---|--- 2026-07-03 17:57:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr4oq7qhq2f 2026-07-14 19:01:02+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0233 2026-07-14 22:02:09+00:00| seen|...

CVE-2026-14631

creationtimestamp| type| source ---|---|--- 2026-07-03 17:27:52+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mpr2zahx5k2i 2026-07-03 22:25:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprlmmi2h32l...

CVE-2026-52188

creationtimestamp| type| source ---|---|--- 2026-07-03 17:22:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2oxwnpc2f...

CVE-2026-38969

creationtimestamp| type| source ---|---|--- 2026-07-03 17:19:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2kwpfdy2c...

CVE-2026-49815

creationtimestamp| type| source ---|---|--- 2026-07-03 17:11:06+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpr23cux7q2y 2026-07-03 17:53:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr4hsesi32h 2026-07-04 09:07:24+00:00| seen|...

CVE-2026-14460

creationtimestamp| type| source ---|---|--- 2026-07-03 17:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpqzirh54m26 2026-07-03 18:20:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr5xznc7d2h 2026-07-04 09:07:53+00:00| seen|...

CVE-2026-53226

creationtimestamp| type| source ---|---|--- 2026-07-03 15:51:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvmqcvp22d 2026-07-21 19:40:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr6ksc4abk2n 2026-07-21 19:40:09+00:00| seen|...

CVE-2026-59101

creationtimestamp| type| source ---|---|--- 2026-07-03 15:10:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtdkwzky2i...

CVE-2026-46463

creationtimestamp| type| source ---|---|--- 2026-07-03 14:59:22+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116856636030223903 2026-07-03 17:58:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr4qg567v2r 2026-07-04 06:28:02+00:00| seen|...

CVE-2026-46730

creationtimestamp| type| source ---|---|--- 2026-07-03 14:01:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqpiumlma2k 2026-07-04 04:12:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mps72lar5t2y...

CVE-2026-10055

CVE-2026-10055 affects Eclipse Theia (since 1.26.0). The issue arises in the backend /services/request-service RPC, which accepts an attacker-controlled URL from any client connected to the standard /services messaging endpoint, then performs the HTTP request server-side and returns the full resp...

CVE-2026-9547

creationtimestamp| type| source ---|---|--- 2026-07-03 09:59:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqbxzt5px2l 2026-07-03 21:35:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpriugcl452f 2026-07-08 16:01:27+00:00| seen|...