2978 matches found
GO-2026-6031 Gitea: API access token scope enforcement bypass on repository RSS/Atom feed endpoints leaks private repository commit data in code.gitea.io/gitea
Gitea: API access token scope enforcement bypass on repository RSS/Atom feed endpoints leaks private repository commit data in code.gitea.io/gitea...
GO-2026-6032 Gitea: Local File Inclusion via file:// URI in Migration Restore in gitea.dev
Gitea: Local File Inclusion via file:// URI in Migration Restore in gitea.dev...
GO-2026-6055 Gitea: ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests in gitea.dev
Gitea: ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests in gitea.dev...
GO-2026-6039 Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata in gitea.dev
Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata in gitea.dev...
GO-2026-6049 Gitea: Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads in gitea.dev
Gitea: Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads in gitea.dev...
GO-2026-6029 Gitea: Git LFS object reuse allows non-Code access to authorize private source objects in code.gitea.io/gitea
Gitea: Git LFS object reuse allows non-Code access to authorize private source objects in code.gitea.io/gitea...
GO-2026-6044 Gitea: Permanent Fork PR Workflow Approval Gate Bypass in code.gitea.io/gitea
Gitea: Permanent Fork PR Workflow Approval Gate Bypass in code.gitea.io/gitea...
GO-2026-6045 Gitea: Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118 in gitea.dev
Gitea: Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118 in gitea.dev...
GO-2026-6035 Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content in gitea.dev
Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content in gitea.dev...
GO-2026-6038 Gitea: Two SSRF findings in gitea.dev
Gitea: Two SSRF findings in gitea.dev...
CVE-2026-28740
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:56+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-2m9v-5q2g-58vq...
CVE-2026-58436
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:50+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-fw57-jgch-pgf3...
CVE-2026-58439
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:45+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-w5pg-649r-p6gg...
CVE-2026-56443
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:43+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-7p4h-3gxq-x3h3 2026-08-14 21:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt32hgmbp425...
CVE-2026-58428
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:41+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-25gq-j9jx-43pg...
CVE-2026-58432
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:39+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-q9pg-jj6x-j9p6...
CVE-2026-59763
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:37+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-9mq6-mqjj-c2c5 2026-08-14 12:45:05+00:00| seen|...
CVE-2026-58425
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:34+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-vxv2-8j6r-pcpg...