6 matches found
CVE-2026-50105
RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...
CVE-2026-50105
The CVE-2026-50105 entry concerns Gitea: RSS/Atom feed handlers bypass API-token scope and public‑only confinement (an incomplete fix of #37698). Public sources in the connected documents describe a access-control weakness in the feed handling component that can bypass token scope checks, enablin...
CVE-2026-50105
RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...
CVE-2026-50105 RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)
RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...
