Expression Language (SpEL) Injection

Spring Data MongoDB is vulnerable to Expression Language SpEL Injection. The vulnerability is due to improper handling of user-supplied values during parameter binding in @Query repository methods using a capture-all placeholder, which allows an attacker to inject and execute malicious SpEL...

Security-Learning-Notes

Personal Cybersecurity Training Repository Repository Descr...

PT-2026-72132

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A Server-Side Request Forgery SSRF flaw exists within the build API. A user with repository write access and the FEATURE BUILD SUPPORT enabled can provide a malicious URL via the archive...

CVE-2026-58507

Private Repository Existence Disclosure via go-get Meta Endpoint...

CVE-2026-58442

Repository migration SSRF via multi-answer DNS allow-list bypass...

CVE-2026-58445

Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API...

CVE-2026-58444

Personal access token scope enforcement bypass on the repository home page GET /owner/repo discloses private repository contents...

CVE-2026-58433

Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...

CVE-2026-58434

Private Repository Metadata Remains Accessible After Access Revocation...

CVE-2026-58437

Repository Visibility Manipulation via Git Push Options...

CVE-2026-58416

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

CVE-2026-57886

Cross-repository issue/comment attachment re-linking can expose private attachment content...

CVE-2026-57894

Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration...

CVE-2026-58510 GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private...

EUVD-2026-58173

Private Repository Existence Disclosure via go-get Meta Endpoint...

CVE-2026-58507 Private Repository Existence Disclosure via go-get Meta Endpoint

Private Repository Existence Disclosure via go-get Meta Endpoint...

CVE-2026-58507

Gitea is vulnerable to a Private Repository Existence Disclosure via the go-get Meta Endpoint in gitea.dev. This flaw allows for the disclosure of whether private repositories exist on the server. Remediation is available in Gitea v1.27.0 , which contains fixes for 45 security issues, including i...

CVE-2026-58444 Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents

Personal access token scope enforcement bypass on the repository home page GET /owner/repo discloses private repository contents...

CVE-2026-58445 Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API

Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API...

CVE-2026-58444

The Git repository management system Gitea is affected by a personal access token scope enforcement bypass on the repository home page (GET /{owner}/{repo}). This vulnerability is caused by a lack of access control, which could allow a malicious actor to expose protected information or private re...