6 matches found
CVE-2026-54481
Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override CWE-295...
CVE-2026-54481
The Gitea Git repository management system contains a flaw where the internal API HTTP client hardcodes InsecureSkipVerify:true in the init-function of the internalAPITransport function (located in modules/private/internal.go). This lack of TLS certificate verification allows a remote attacker on...
CVE-2026-54481 Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295)
Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override CWE-295...
CVE-2026-54481 Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295)
Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override CWE-295...