CVE-2026-24451

Gitea 1.26.2 allows fork synchronization to continue after a parent repository changes from public to private, exposing data to a fork that should no longer be authorized...

CVE-2026-24451

CVE-2026-24451 (Gitea 1.26.2) : Fork synchronization remains allowed after the parent repository changes from public to private, exposing data to a fork that should no longer be authorized. Publicly available fixes are in Gitea v1.26.3 and v1.26.4 (see release notes and advisories). The connected...

CVE-2026-43418

In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Prevent CID stalls due to concurrent forks A newly forked task is accounted as MMCID user before the task is visible in the process' thread list and the global task list. This creates the following problem: CPU1 CPU2...