35358 matches found
CVE-2026-58425
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:34+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-vxv2-8j6r-pcpg...
CVE-2026-58507
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:30+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-p4mj-98mv-xq26...
CVE-2026-58314
creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:23+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-2fcr-jfvc-vgg2...
CVE-2026-58510
creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q423-49rw-g9mh 2026-08-14 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/gitea-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...
CVE-2026-47690
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
CVE-2026-47690 MeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflow
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
CVE-2026-47690 MeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflow
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
CVE-2026-47690 MeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflow
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
EUVD-2026-46420
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
CVE-2026-47690
MeltanoHub (hub.meltano.com) had a vulnerability in versions prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173, where a pull_request_target workflow could exfiltrate the repository GITHUB_TOKEN with write permissions. The issue was fixed by the commit 923820de8f64d753951fbbd54f7282a3d5f751...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization through the UpdatePullRequest function. An attacker can cause unauthorized modifications to private repository branches by exploiting a logic flaw in token scope validation during pull request updates from a publ...
CVE-2026-57894
creationtimestamp| type| source ---|---|--- 2026-07-21 20:35:06+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-82f7-87hm-852x...
GHSA-G8R8-53C2-PM3F vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap, dotnet-sdk, promitor, powershell, dotnet...
GHSA-CVVH-RHRC-WG4Q vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap, dotnet-sdk, promitor, powershell, dotnet...
GHSA-V422-HMWV-36X6 vulnerabilities
Vulnerabilities for packages: json-server, tileserver-gl, langfuse, kubeflow-pipelines, jupyter-base-notebook, sqlpad, kubeflow-centraldashboard, code-server, argo-workflows...
GHSA-G8R8-53C2-PM3F vulnerabilities
Vulnerabilities for packages: dotnet-sdk, powershell, promitor, dotnet, dotnet-bootstrap...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the shouldAcceptNewConnection process. An attacker can inject spoofed appcast item data by establishing unauthorized local connections to the registered Mach service after stage 1...
xssscannerpro
XSSScannerPro v2.0 XSSScannerPro — veb tətbiqlərdə XSS C...