146360 matches found
GHSA-3FWP-P5RJ-2PXF Gitea: Missing repository-unit authorization on issue-template API endpoints
Summary Three Gitea API endpoints — GET /repos/owner/repo/issuetemplates, GET /repos/owner/repo/issueconfig and GET /repos/owner/repo/issueconfig/validate — read files from the repository's Code default branch .gitea/ISSUETEMPLATE/ and issueconfig.yaml and return their contents, but are registere...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the GetIssueTemplates, GetIssueConfig, and ValidateIssueConfig API endpoints, which lack proper authorization checks. An attacker can access sensitive configuration files from the Code default branch of a privat...
Gitea: Missing repository-unit authorization on issue-template API endpoints
Summary Three Gitea API endpoints — GET /repos/owner/repo/issuetemplates, GET /repos/owner/repo/issueconfig and GET /repos/owner/repo/issueconfig/validate — read files from the repository's Code default branch .gitea/ISSUETEMPLATE/ and issueconfig.yaml and return their contents, but are registere...
MINI-3WR7-25WJ-MVWH
Bulletin has no description...
MINI-4PV6-9MQM-FMXH
Bulletin has no description...
EUVD-2026-37191
In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
GHSA-F59H-Q822-G45G Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`
Summary forwardauth copyheaders deletes the exact client-supplied identity header before copying the trusted value from the auth gateway. But when the request later goes through phpfastcgi, Caddy normalizes HTTP headers into CGI variables by replacing - with . This lets a client send an underscor...
CVE-2026-46970
...
CVE-2026-46963
...
CVE-2026-46957
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-46957
...
CVE-2026-46953
...
CVE-2026-46951
Technical details about CVE-2026-46951 are not publicly provided in the supplied documents. Monitor Oracle security alerts and CVE feeds for updates on affected products, impact, and fixes.
CVE-2026-46946
Technical details are not publicly available in the provided documents for CVE-2026-46946; monitor for updates.
CVE-2026-46935
...
CVE-2026-46919
Technical details about CVE-2026-46919 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records for affected products, impact, and remediation.
CVE-2026-46916
Technical details for CVE-2026-46916 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE listings.
CVE-2026-46914
...