5 matches found
CVE-2026-54481
Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override CWE-295...
CVE-2026-54481 Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295)
Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override CWE-295...
CVE-2026-54481 Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295)
Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override CWE-295...
CVE-2026-54481
CVE-2026-54481 affects Gitea: Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295). Root cause is TLS verification disabled by default, enabling potential interception of TLS traffic. CVSS v3.1 base score 7.5 (HIGH) with adjacent attacker, no user interacti...
