16 matches found
BIT-GITEA-2026-101027 Gitea migration SSRF through ALLOWED_DOMAINS address check bypass
When migrations ALLOWEDDOMAINS was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A user who can start repository migrations and control the DNS of an allowed hostname could make it resolve to loopback or...
BIT-GITEA-2026-96400 Gitea migration SSRF to reserved addresses through ALLOWED_DOMAINS
With migrations ALLOWEDDOMAINS set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as 169.254.169.254, even when ALLOWLOCALNETWORKS = false. The local-network block list did not cover these ranges, and a...
CVE-2026-101027
When migrations ALLOWEDDOMAINS was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A user who can start repository migrations and control the DNS of an allowed hostname could make it resolve to loopback or...
CVE-2026-96400 Gitea migration SSRF to reserved addresses through ALLOWED_DOMAINS
With migrations ALLOWEDDOMAINS set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as 169.254.169.254, even when ALLOWLOCALNETWORKS = false. The local-network block list did not cover these ranges, and a...
CVE-2026-96400 Gitea migration SSRF to reserved addresses through ALLOWED_DOMAINS
With migrations ALLOWEDDOMAINS set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as 169.254.169.254, even when ALLOWLOCALNETWORKS = false. The local-network block list did not cover these ranges, and a...
CVE-2026-96400 Gitea migration SSRF to reserved addresses through ALLOWED_DOMAINS
With migrations ALLOWEDDOMAINS set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as 169.254.169.254, even when ALLOWLOCALNETWORKS = false. The local-network block list did not cover these ranges, and a...
CVE-2026-96400
The Gitea migration functionality is vulnerable to a Server-Side Request Forgery (SSRF) when the [migrations] ALLOWED_DOMAINS configuration is set to a wildcard (e.g., *) or a hostname wildcard. The underlying cause is that the local-network block list fails to cover reserved and link-local addre...
CVE-2026-101027 Gitea migration SSRF through ALLOWED_DOMAINS address check bypass
When migrations ALLOWEDDOMAINS was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A user who can start repository migrations and control the DNS of an allowed hostname could make it resolve to loopback or...
CVE-2026-101027
When "migrations ALLOWEDDOMAINS" was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A user who can start repository migrations and control the DNS of an allowed hostname could make it resolve to loopback or...
CVE-2026-101027 Gitea migration SSRF through ALLOWED_DOMAINS address check bypass
When migrations ALLOWEDDOMAINS was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A user who can start repository migrations and control the DNS of an allowed hostname could make it resolve to loopback or...
CVE-2026-101027
The Gitea server is vulnerable to a Server-Side Request Forgery (SSRF) due to an address check bypass in the migration functionality. When [migrations] ALLOWED_DOMAINS is configured, the system accepts hostnames from the allow list without verifying their resolved addresses against local-network ...
CVE-2026-101027 Gitea migration SSRF through ALLOWED_DOMAINS address check bypass
When migrations ALLOWEDDOMAINS was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A user who can start repository migrations and control the DNS of an allowed hostname could make it resolve to loopback or...
CVE-2026-101027: Origin Validation Error
When migrations ALLOWEDDOMAINS was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A user who can start repository migrations and control the DNS of an allowed hostname could make it resolve to loopback or...
CVE-2026-6689
Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 Fail to enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation the check was only applied on update/patch, which allows an authenticated user holding...
CVE-2026-6689: Missing Authorization
Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 Fail to enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation the check was only applied on update/patch, which allows an authenticated user holding...