142 matches found
CVE-2026-78433
Gitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the repository named in the request URL instead. An unauthenticated attacker who knows a private attachment's UUID can request it through a publi...
EUVD-2026-101111
Gitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the repository named in the request URL instead. An unauthenticated attacker who knows a private attachment's UUID can request it through a publi...
CVE-2026-63792
"CanReadWorkflowCrossRepo" decides whether an Actions run may read a reusable workflow file referenced from another repository. Its "collaborative owner" branch grants cross-repository read through the collaborative-owner trust relationship without checking whether the run is a fork pull request...
CVE-2026-57897
A flaw was found in Gitea. This vulnerability allows for cross-repository information disclosure through the use of Org-Level Actions Run/Job Application Programming Interfaces APIs. An attacker could exploit this to gain unauthorized access to sensitive information across different repositories...
ANT-2026-VN61PHA0 · gitea · IDOR
idor medium CVE-2026-58435 GHSA-rh79-75qm-gwjr Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Doyensec. ANT-2026-VN61PHA0: Gitea LFS Deploy-Ke...
CVE-2026-58445
Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API...
CVE-2026-57886
Cross-repository issue/comment attachment re-linking can expose private attachment content...
CVE-2026-58445 Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API
Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API...
CVE-2026-58438
The Git repository management system Gitea is vulnerable to a cross-repository IDOR (Insecure Direct Object Reference) in the issue-dependency removal functionality. This flaw allows a malicious actor to tamper with and comment on private repositories they are not authorized to access. A proof-of...
CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...
CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...
CVE-2026-57897 Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs
Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs...
CVE-2026-57897
A flaw in Gitea allows for cross-repository information disclosure through the use of Org-Level Actions Run/Job APIs . An attacker could exploit this vulnerability to gain unauthorized access to sensitive information across different repositories. To mitigate this risk, you can globally disable G...
CVE-2026-57886 Cross-repository issue/comment attachment re-linking can expose private attachment content
Cross-repository issue/comment attachment re-linking can expose private attachment content...
CVE-2026-57886 Cross-repository issue/comment attachment re-linking can expose private attachment content
Cross-repository issue/comment attachment re-linking can expose private attachment content...
CVE-2026-57886
The Git repository management system Gitea is vulnerable to a cross-repository issue where re-linking issue or comment attachments can expose private attachment content. The root cause lies in the UpdateIssueAttachments() function (in models/issues/issue_update.go) and the UpdateCommentAttachment...
CVE-2026-57886 Cross-repository issue/comment attachment re-linking can expose private attachment content
Cross-repository issue/comment attachment re-linking can expose private attachment content...
EUVD-2026-58147
Cross-repository issue/comment attachment re-linking can expose private attachment content...
