CVE-2026-104626

A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gitea Actions run that is awaiting approval. When a later run in that group cancels the blocked job, the run becomes terminal while still marked as needing approval. If a maintainer...

CVE-2026-104626

The Gitea Actions system is vulnerable to a workflow job revival flaw. A user capable of opening a fork pull request can inject workflow content using a shared run-level concurrency group into a run awaiting approval. If a subsequent run in that group cancels the blocked job, the run enters a ter...

CVE-2026-104632 Gitea fork workflow approval bypass through cancel and rerun

Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required a run to be finished and built the new attempt's jobs without considering the pending approval, so when a user with Actions write access...

CVE-2026-104632 Gitea fork workflow approval bypass through cancel and rerun

Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required a run to be finished and built the new attempt's jobs without considering the pending approval, so when a user with Actions write access...

EUVD-2026-93905

Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required a run to be finished and built the new attempt's jobs without considering the pending approval, so when a user with Actions write access...

CVE-2026-104632

Gitea Actions contains a vulnerability where workflow jobs from first-time fork pull request contributors can bypass the required maintainer approval. The root cause is that the rerun path only checks if a run is finished and builds new jobs without verifying the pending approval status. An attac...

CVE-2026-104632 Gitea fork workflow approval bypass through cancel and rerun

Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required a run to be finished and built the new attempt's jobs without considering the pending approval, so when a user with Actions write access...

CVE-2026-104632

Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required a run to be finished and built the new attempt's jobs without considering the pending approval, so when a user with Actions write access...

CVE-2026-104632

Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required a run to be finished and built the new attempt's jobs without considering the pending approval, so when a user with Actions write access...

PT-2026-107220

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea Actions incorrectly determined if a fork pull request run required approval by checking the user who triggered the event instead of the pull request author. When a maintainer performed...

CVE-2026-104626: Improper Enforcement of Behavioral Workflow

A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gitea Actions run that is awaiting approval. When a later run in that group cancels the blocked job, the run becomes terminal while still marked as needing approval. If a maintainer...

PT-2026-107175

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description A flaw in Gitea Actions allows a user who can open a fork pull request to execute fork-controlled workflow code. By using a shared run-level concurrency group, an attacker can place workflow...

PT-2026-107172

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description A flaw exists in Gitea Actions where older runs within the same workflow-level concurrency group are cancelled upon the insertion of a new run without verifying if the new run requires approval...

PT-2026-107226

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea fails to limit the size of a workflow's static strategy.matrix when expanding it into a full Cartesian product during run creation. This occurs before the fork pull request approval gate ...

PT-2026-107176

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description A flaw in Gitea Actions allows workflow code from first-time fork pull request contributors to execute on repository runners without required maintainer approval. This occurs because the rerun...

CVE-2026-104632: Improper Authorization

Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required a run to be finished and built the new attempt's jobs without considering the pending approval, so when a user with Actions write access...

CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

CVE-2026-67308 Wazuh GitHub Actions Shell Injection via Fork Pull Request

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

GO-2026-6052 Gitea: Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard) in gitea.dev

Gitea: Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard in gitea.dev...