2 matches found
SUSE CVE-2026-26247
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check...
9.1CVSS5.7AI score0.00495EPSS
SaveExploits0References2
Gitea OAuth2 PKCE S256 verifier bypass
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check...
9.1CVSS5.9AI score0.00495EPSS
SaveExploits0References8Affected Software1
20