CVE-2026-42931

The Gitea application is vulnerable to a Denial of Service (DoS) attack due to the use of Unbounded io.ReadAll in the NPM Package Tag Endpoint . This vulnerability allows for the allocation of resources without limits or throttling, potentially leading to service exhaustion. Users are encouraged ...

SUSE CVE-2026-42931

Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint...