logrus-dos-poc

CVE-2025-65637: Logrus Denial of Service Vulnerability This directory contains proof-of-concept code and test scripts for the Denial of Service DoS vulnerability in github.com/sirupsen/logrus, assigned as CVE-2025-65637. Vulnerability Summary CVE ID : CVE-2025-65637 CWE : CWE-400 Uncontrolled...

SUSE CVE-2026-27780

Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: skopeo (UTSA-2026-102702)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102702 advisory. A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline...

Gitea pre-receive hook scanner errors allow branch-protection bypass

Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...

CVE-2026-27780: Incorrect Authorization

Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...

CVE-2025-65637: Uncontrolled Resource Consumption

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...