The vulnerability of the IntrospectOAuth() function in the routers/web/auth/oauth2_provider.go file of the Git repository management system Gitea allows a hacker to disclose sensitive information that should be protected.

The vulnerability of the IntrospectOAuth function in the routers/web/auth/oauth2provider.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Vulnerability of the endpoint /api/v1/teams/{teamid} of the Git repository management system Gitea, which allows a hacker to expose protected information

The vulnerability of the endpoint /api/v1/teams/teamid of the Gitea Git repository management system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability of the Git repository management system Gitea’s path "{owner}/{repo}", which allows attackers to expose protected information.

The vulnerability of the Git repository management system Gitea’s path/owner/repo is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to expose the protected information...

The vulnerability of the DeleteIssueLabel() function in the routers/api/v1/repo/issue_label.go file of the Git repository management system Gitea allows a attacker to expose protected information.

The vulnerability of the DeleteIssueLabel function in the routers/api/v1/repo/issuelabel.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected...

The vulnerability of the DeleteCollaboration() function in the services/repository/collaboration.go file of the Git repository management system Gitea allows a hacker to disclose sensitive information that should be protected.

The vulnerability of the DeleteCollaboration function in the services/repository/collaboration.go file of the Git repository management system Gitea is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability of the IsMigrateURLAllowed() function in the services/migrations/migrate.go file of the Git repository management system Gitea allows a attacker to expose protected information.

The vulnerability of the IsMigrateURLAllowed function in the services/migrations/migrate.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability lies in the files routers/api/v1/api.go, routers/api/packages/api.go, services/context/api.go, and services/context/permission.go of the Git repository management system Gitea. This vulnerability allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerabilities in the files routers/api/v1/api.go, routers/api/packages/api.go, services/context/api.go, and services/context/permission.go of the Git repository management system Gitea are related to access control deficiencies. Exploiting these vulnerabilities could allow a malicious actor...

The vulnerability of the `handleOAuth2SignIn()` function in the routers/web/auth/oauth.go file of the Git repository management system Gitea allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the handleOAuth2SignIn function in the routers/web/auth/oauth.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protecte...

The vulnerability lies in the function (*HostMatchList).checkIP() in the file modules/hostmatcher/hostmatcher.go, and the function RedirectURL() in the file modules/auth/openid/openid.go of the Git repository management system Gitea. This vulnerability allows a hacker to disclose protected information.

The vulnerability of the HostMatchList.checkIP function in the modules/hostmatcher/hostmatcher.go file and the RedirectURL function in the modules/auth/openid/openid.go file of the Git repository management system Gitea is related to incorrect calculations. Exploiting this vulnerability could all...

The vulnerability in the `services/lfs/server.go` and `routers/private/serv.go` files of the Git repository management system Gitea allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the services/lfs/server.go and routers/private/serv.go files of the Git repository management system Gitea is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected...

The vulnerability of the HookPostReceive() function in the routers/private/hook_post_receive.go file of the Git repository management system Gitea allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the HookPostReceive function in the routers/private/hookpostreceive.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

The vulnerability of the ToHook() function in the services/webhook/general.go file of the Git repository management system Gitea allows a hacker to expose protected information.

The vulnerability of the ToHook function in the services/webhook/general.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by this functio...

The vulnerability of the UpdatePullRequest() function in the routers/api/v1/repo/pull.go file of the Git repository management system Gitea allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the UpdatePullRequest function in the routers/api/v1/repo/pull.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and...

The vulnerability of the AddTime() function in the routers/api/v1/repo/issue_tracked_time.go file of the Git repository management system Gitea allows a attacker to cause a service failure.

The vulnerability of the AddTime function in the routers/api/v1/repo/issuetrackedtime.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the *GiteaLocalUploader.CreateReleases() function in the services/migrations/gitea Uploader.go file of the Git repository management system Gitea allows a attacker to expose protected information.

The vulnerability of the GiteaLocalUploader.CreateReleases function in the services/migrations/giteauploader.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to disclose sensiti...

PT-2026-104588

Name of the Vulnerable Software and Affected Versions act runner affected versions not specified Description The act runner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When privileged mode is disabled, the system only forces the...

gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled

actrunner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When runner privileged mode is disabled, only Privileged is forced false. Host namespace flags, capability expansion, and security profile overrides from workflow YAML are...

The vulnerability of the Open() function in the modules/uri/uri.go file of the Git repository management system Gitea, which allows a hacker to disclose protected information

The vulnerability of the Open function in the modules/uri/uri.go file of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability of the GetPullRequests() function in the services/migrations/restore.go file of the Git repository management system Gitea allows a attacker to perform an SSRF attack.

The vulnerability of the GetPullRequests function in the services/migrations/restore.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a attacker to perform an SSRF attack...

The vulnerability of the `ServeAttachment` function in the `routers/web/repo/attachment.go` file of the Git repository management system Gitea allows a attacker to disclose sensitive information.

The vulnerability of the ServeAttachment function in the routers/web/repo/attachment.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...