361525 matches found
PT-2026-65348
The Avro map decoder accepts attacker-controlled block-element counts from the wire format and grows the destination map without enforcing an upper bound. A producer can declare an arbitrarily large map in one block, or chunked across many sub-limit blocks and exhaust process memory until the OOM...
PT-2026-65360
Gitea: Private Repository Metadata Remains Accessible After Access Revocation in gitea.dev...
PT-2026-65355
Improper parsing of W3C baggage headers may lead to DoS in github.com/DataDog/dd-trace-go...
PT-2026-65376
Gitea: OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation in gitea.dev...
PT-2026-65352
Providing a specially crafted dictionary to s2.NewDict and using it to encode data can make the encoder read out of bounds...
PT-2026-65359
Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc...
PT-2026-65358
Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write in code.gitea.io/gitea...
PT-2026-65351
Ollama is Vulnerable to Path Traversal in github.com/ollama/ollama...
PT-2026-65372
Gitea: SSRF via HTTP Redirect in Repository Migration in code.gitea.io/gitea...
PT-2026-65353
Excelize: Unbounded Row Index Allocation in Worksheet Parser checkSheet OOM/Panic DoS in github.com/xuri/excelize...
PT-2026-65368
Gitea: draft release attachment disclosure via missing web authorization in gitea.dev...
PT-2026-65367
Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private in gitea.dev...
PT-2026-65354
Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy...
PT-2026-65349
Buildah allows a build-time breakout when using a malicious Containerfile or a malicious Git HTTP server. A crafted Git URL or Containerfile can cause Buildah to access files outside of the build context during an ADD or COPY operation...
PT-2026-65346
The Avro array and map decoders loop over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHeader returns the count as a Go int, which is 64-bit on amd64 and arm64 targets. A producer can declare a block of up to...
PT-2026-65381
Gitea: SSRF in restore-repo via unsanitized pull request.yml Head.CloneURL in gitea.dev...
PT-2026-65382
Gitea: Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access in gitea.dev...
PT-2026-65366
Gitea: Private org member list leaked via /members API endpoint — incomplete fix for PR 38145 in gitea.dev...