151229 matches found
CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...
CVE-2026-58438
The Git repository management system Gitea is vulnerable to a cross-repository IDOR (Insecure Direct Object Reference) in the issue-dependency removal functionality. This flaw allows a malicious actor to tamper with and comment on private repositories they are not authorized to access. A proof-of...
EUVD-2026-58165
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...
CVE-2026-57886 Cross-repository issue/comment attachment re-linking can expose private attachment content
Cross-repository issue/comment attachment re-linking can expose private attachment content...
CVE-2026-57886 Cross-repository issue/comment attachment re-linking can expose private attachment content
Cross-repository issue/comment attachment re-linking can expose private attachment content...
CVE-2026-73626
creationtimestamp| type| source ---|---|--- 2026-08-13 12:54:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cdvs2ljzsbbrs...
ECHO-67F1-7AAD-51AF
Bulletin has no description...
MINI-F58Q-FRH9-26R3
Bulletin has no description...
CVE-2026-16974
creationtimestamp| type| source ---|---|--- 2026-08-13 04:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mswrvdxxxy24...
MINI-J4C7-PJ6M-MMH6
Bulletin has no description...
MINI-M5V4-V6GJ-RHXC
Bulletin has no description...
CVE-2026-58438: Missing Authorization
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...
CVE-2026-57886: Authorization Bypass Through User-Controlled Key
Cross-repository issue/comment attachment re-linking can expose private attachment content...
CVE-2026-50060
creationtimestamp| type| source ---|---|--- 2026-08-12 23:00:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mswab7irh72p 2026-08-12 23:00:57+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117085021129724985...
MINI-QC42-4QFV-357P
Bulletin has no description...
MINI-6F4R-X5FJ-8CQ5
Bulletin has no description...
MINI-V8X2-R4XP-42CJ
Bulletin has no description...
CVE-2026-19151 vulnerabilities
Vulnerabilities for packages: chromium...