EUVD-2026-58135

Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint...

CVE-2026-42931

CVE-2026-42931 concerns Gitea’s NPM Package Tag Endpoint. Multiple sources confirm a Denial of Service arising from an unbounded read via io.ReadAll in that endpoint, impacting Gitea deployments that rely on the affected NPM tag endpoint. The root cause is described as unbounded resource usage du...

CVE-2026-42931 Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint

Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint...

CVE-2026-42931 Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint

Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint...

GO-2026-6082 Gitea: Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint in gitea.dev

Gitea: Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint in gitea.dev...