GO-2026-6017 Gitea has insufficient permission checks for Composer package source links in code.gitea.io/gitea

Gitea has insufficient permission checks for Composer package source links in code.gitea.io/gitea...

GO-2026-6029 Gitea: Git LFS object reuse allows non-Code access to authorize private source objects in code.gitea.io/gitea

Gitea: Git LFS object reuse allows non-Code access to authorize private source objects in code.gitea.io/gitea...

CVE-2026-61235

creationtimestamp| type| source ---|---|--- 2026-07-22 20:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb6bs2urd2a 2026-07-23 18:18:09+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-59145

creationtimestamp| type| source ---|---|--- 2026-07-22 20:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb6bqtgk62v...

CVE-2026-59144

creationtimestamp| type| source ---|---|--- 2026-07-22 20:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb667p2vy2r...

CVE-2026-62414

creationtimestamp| type| source ---|---|--- 2026-07-22 20:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb666fqif2y...

CVE-2025-36359

creationtimestamp| type| source ---|---|--- 2026-07-22 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrb4rkeuez2m...

CVE-2026-61244

creationtimestamp| type| source ---|---|--- 2026-07-22 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb3b6jauz2y 2026-07-23 18:18:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61242

creationtimestamp| type| source ---|---|--- 2026-07-22 19:38:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb35ogul22u 2026-07-23 18:18:24+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61238

creationtimestamp| type| source ---|---|--- 2026-07-22 19:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb323ok5m24 2026-07-23 18:18:16+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61237

creationtimestamp| type| source ---|---|--- 2026-07-22 19:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb322idp623 2026-07-23 18:18:14+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61245

creationtimestamp| type| source ---|---|--- 2026-07-22 19:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb2wief7i22 2026-07-23 18:18:31+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61211

creationtimestamp| type| source ---|---|--- 2026-07-22 19:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb2wh4xix2v 2026-07-23 18:17:46+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61209

creationtimestamp| type| source ---|---|--- 2026-07-22 19:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb2sw2ebq2v 2026-07-23 18:17:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61207

creationtimestamp| type| source ---|---|--- 2026-07-22 19:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb2sutips2j 2026-07-23 18:17:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-15810

creationtimestamp| type| source ---|---|--- 2026-07-22 19:20:06+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mrb25ilq332d 2026-07-24 13:53:12+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrfisrwnpj2x...

CVE-2026-52470

creationtimestamp| type| source ---|---|--- 2026-07-22 18:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraxzjxawt2i...

CVE-2026-65011

creationtimestamp| type| source ---|---|--- 2026-07-22 18:32:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraxil67sb2e...

EUVD-2026-47769

Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booking data, including fields like organizer/attendee emails and custom responses, and conditionally video-call passwords...

CVE-2026-16624 CVE-2026-16624

Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booking data, including fields like organizer/attendee emails and custom responses, and conditionally video-call passwords...