1990 matches found
CVE-2026-58053
Gitea act_runner (Docker backend) up to act 0.262.0 is vulnerable: the workflow.container.options are merged into the Docker job container HostConfig, and if privileged is set to false, only the Privileged flag is disabled while options such as --pid=host, --cap-add, and --security-opt remain. A ...
CVE-2026-58053
Gitea actrunner with the Docker backend through act 0.262.0 passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-op...
GHSA-M43H-MP45-GHQ6 vulnerabilities
Vulnerabilities for packages: ollama, bento, rclone, seaweedfs, kubescape, gitea-fips, mattermost, pdfcpu, seaweedfs-fips, seaweedfs-rocksdb, bento-fips, seaweedfs-rocksdb-fips, kubescape-server-fips, seaweedfs-operator, mailpit, ollama-fips, gitlab-workhorse-ce, mattermost-fips, rclone-fips,...
CVE-2026-46601 vulnerabilities
Vulnerabilities for packages: ollama, bento, rclone, seaweedfs, kubescape, gitea-fips, mattermost, pdfcpu, seaweedfs-fips, seaweedfs-rocksdb, bento-fips, seaweedfs-rocksdb-fips, kubescape-server-fips, seaweedfs-operator, mailpit, ollama-fips, gitlab-workhorse-ce, mattermost-fips, rclone-fips,...
GHSA-VGWF-H737-FF37 vulnerabilities
Vulnerabilities for packages: cloud-provider-aws, wal-g, commercial-expanso-edge, prometheus-mongodb-exporter, coder-fips, packer-fips, podman-fips, flux, harbor-fips, kubernetes-dashboard, harbor, gatus, osv-scanner, mattermost, redpanda-console, knative-serving-fips, witness, kyverno, drone-fip...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: cloud-provider-aws, commercial-expanso-edge, prometheus-mongodb-exporter, coder-fips, flux, harbor-fips, kubernetes-dashboard, harbor, osv-scanner, mattermost, knative-serving-fips, kyverno, drone-fips, telegraf, opentofu-fips, frankenphp-8.4, istio, traefik,...
GHSA-QPW4-5X99-6VJP vulnerabilities
Vulnerabilities for packages: cloud-provider-aws, wal-g, commercial-expanso-edge, prometheus-mongodb-exporter, coder-fips, packer-fips, podman-fips, flux, harbor-fips, kubernetes-dashboard, harbor, gatus, osv-scanner, mattermost, redpanda-console, knative-serving-fips, witness, kyverno, drone-fip...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: cloud-provider-aws, commercial-expanso-edge, prometheus-mongodb-exporter, packer-fips, podman-fips, flux, harbor-fips, kubernetes-dashboard, harbor, osv-scanner, mattermost, redpanda-console, knative-serving-fips, witness, kyverno, consul, telegraf, opentofu-fips,...
GHSA-M43H-MP45-GHQ6 vulnerabilities
Vulnerabilities for packages: rclone, seaweedfs, gitea, kubescape, mattermost, ollama, bento, pdfcpu, mailpit...
CVE-2026-46601 vulnerabilities
Vulnerabilities for packages: rclone, seaweedfs, gitea, kubescape, mattermost, ollama, bento, pdfcpu, mailpit...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: dagger, docker-machine-driver-harvester, snyk-cli, crossplane-provider-azure-authorization, flux, policy-controller, istio, eksctl, vault-benchmark, pulumi-kubernetes-operator, wolfictl, hcloud, k8sgpt, flux-kustomize-controller, aactl, fulcio, minio,...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: chisel, flux-image-automation-controller, knative-serving, nerdctl, external-secrets-operator, k3s, kubescape, snyk-cli, trivy, flux, flux-source-controller, containerd, istio, cloud-provider-aws, prometheus, opentelemetry-collector, osv-scanner, zarf, rancher, kine,...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: dagger, docker-machine-driver-harvester, snyk-cli, flux, istio, pulumi-kubernetes-operator, wolfictl, aactl, pulumi-language-yaml, minio, telegraf, argocd-image-updater, mattermost, act, gptscript, loki, external-dns, cilium, opentofu, cilium-cli, pulumi, spire-serve...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: chisel, flux-image-automation-controller, docker-machine-driver-harvester, knative-serving, nerdctl, external-secrets-operator, k3s, kubescape, snyk-cli, trivy, flux, flux-source-controller, containerd, istio, cloud-provider-aws, prometheus, opentelemetry-collector,...
GHSA-78MQ-XCR3-XM33 vulnerabilities
Vulnerabilities for packages: argo-events, scorecard, dagger, flux-image-automation-controller, knative-serving, pulumi-language-java, nerdctl, external-secrets-operator, k3s, kubescape, snyk-cli, trivy, flux, flux-source-controller, containerd, nuclei, istio, cloud-provider-aws, prometheus,...
ROS-20260626-73-0004
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
GO-2026-5721 Gitea: Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes in code.gitea.io/gitea
Gitea: Public-only tokens bypass private-resource restrictions on /api/v1/user self routes in code.gitea.io/gitea...
GO-2026-5510 Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo in code.gitea.io/gitea
Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo in code.gitea.io/gitea...