CVE-2026-34966

A flaw was found in Gitea. This server-side request forgery SSRF vulnerability allows authenticated attackers to bypass existing protections. By manipulating HTTP fetch operations during migrations or OAuth avatar processing, an attacker can force the Gitea server to make requests to arbitrary...

EUVD-2024-53439

Malicious code in bioql PyPI...

Akaunting 跨站脚本漏洞

Akaunting is a free, open source online accounting software designed for small businesses and freelancers. akaunting 2.1.12 and earlier versions contain a persistent cross-site scripting vulnerability when processing user-supplied avatar images. An attacker could exploit the vulnerability to inse...