22718 matches found
GO-2026-6067 Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API in gitea.dev
Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API in gitea.dev...
GO-2026-6058 Gitea: Repository migration SSRF via multi-answer DNS allow-list bypass in gitea.dev
Gitea: Repository migration SSRF via multi-answer DNS allow-list bypass in gitea.dev...
GO-2026-6084 Gitea: SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL in gitea.dev
Gitea: SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL in gitea.dev...
brave-browser v1.95.9
Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...
isms-builder v1.37.0
ISMS Builder Self-hosted Information Security Management System — open source, no cloud required ⚠️ Security Warning: Fake repositories and copies distributing malware ISMS Builder has no packaged "releases", installers, or downloadable ZIP files — the only legitimate source is this repository,...
Malicious Package
Overview polymarket-stake-maths is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
PT-2026-65365
Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API in gitea.dev...
PT-2026-65110
An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...
PT-2026-65356
Gitea: Repository migration SSRF via multi-answer DNS allow-list bypass in gitea.dev...
PT-2026-65364
Gitea: Private Repository Existence Disclosure via go-get Meta Endpoint in gitea.dev...
PT-2026-65360
Gitea: Private Repository Metadata Remains Accessible After Access Revocation in gitea.dev...
PT-2026-65382
Gitea: Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access in gitea.dev...
PT-2026-65116
Name of the Vulnerable Software and Affected Versions JFrog Artifactory affected versions not specified Description Build readers can access environment properties of another repository. A user with read access to a standard repository can select a readable repository parameter when retrieving...
PT-2026-65381
Gitea: SSRF in restore-repo via unsanitized pull request.yml Head.CloneURL in gitea.dev...
PT-2026-65351
Ollama is Vulnerable to Path Traversal in github.com/ollama/ollama...
PT-2026-65107
Name of the Vulnerable Software and Affected Versions JFrog Artifactory affected versions not specified Description A deserialization weakness exists in the way JFrog Artifactory handles packages. This flaw could allow a low-privileged user to compromise confidentiality, integrity, and availabili...
PT-2026-65111
Name of the Vulnerable Software and Affected Versions JFrog Artifactory affected versions not specified Description A URL validation weakness in the handling of Ansible repositories could allow a user, under specific repository access conditions, to trigger unintended server-side requests. This...
CVE-2026-65925: Server-Side Request Forgery (SSRF)
A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and return the response...