63473 matches found
CVE-2026-58510
GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private...
CVE-2026-58445
Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API...
CVE-2026-58511
Webhook Authorization Header Returned in Plaintext via API...
CVE-2026-58431
Public-only API token restriction is not enforced on team API routes...
CVE-2026-58427
Private org member list leaked via /members API endpoint — incomplete fix for PR 38145...
CVE-2026-58417
REST API exposes organization membership of private organizations to public...
CVE-2026-56654
Privilege Escalation via Access Token Scope Escalation in API...
CVE-2026-55982
OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes...
CVE-2026-55986
Email Management API Bypasses ManageCredentials Feature Restrictions...
CVE-2026-55984
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
CVE-2026-50105
RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...
CVE-2026-24791
Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...
CVE-2026-24059
The GET /api/v1/user/actions/runners/registration-token endpoint and its owner- and repository-level equivalents creates a new runner registration token if none exists, yet the API scope middleware classifies it as read-only because it is a GET request. A holder of a leaked read:user-scoped token...
Why API Discovery Is Critical for Modern AppSec Programs
Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure , and such exposure rarely gets tested. Attackers build their own inventory through live reconnaissance; they do not wait for your spreadsheet. API discovery must pul...
CVE-2026-24791
CVE-2026-24791 affects Gitea self-hosted code.gitea.io/gitea where tokens labeled public-only can bypass private-resource restrictions on the canonical /api/v1/user self routes. Connected sources confirm the vulnerability exists in the public-only token handling for self endpoints (e.g., /api/v1/...
EUVD-2026-58127
Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...
CVE-2026-24059 Gitea runner registration-token GET endpoint performs a write under a read-only token scope
The GET /api/v1/user/actions/runners/registration-token endpoint and its owner- and repository-level equivalents creates a new runner registration token if none exists, yet the API scope middleware classifies it as read-only because it is a GET request. A holder of a leaked read:user-scoped token...
CVE-2026-24791 Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes
Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...
