5863 matches found
CVE-2026-73651 TypeORM: migration:generate template-literal code injection
TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Oracle, and other databases. Prior to versions 0.3.31 and 1.1.0, typeorm migration:generate embeds database schema metadata into JavaScript or TypeScript template literals in...
CVE-2026-58442
Repository migration SSRF via multi-answer DNS allow-list bypass...
CVE-2026-58508
Two SSRF vulnerabilities in Gitea migration/mirror DNS rebinding + missing re-validation...
CVE-2026-58420
Local File Inclusion via file:// URI in Migration Restore...
CVE-2026-59765
The Git repository management system Gitea (prior to version 1.27.0 ) is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause involves the use of Go's default http.Get without a custom DialContext in HTTP fetch operations, specifically within migration and OAuth avatar code paths. ...
CVE-2026-59765 SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata
SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata...
EUVD-2026-58126
SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata...
EUVD-2026-58174
Two SSRF vulnerabilities in Gitea migration/mirror DNS rebinding + missing re-validation...
CVE-2026-58508 Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)
Two SSRF vulnerabilities in Gitea migration/mirror DNS rebinding + missing re-validation...
CVE-2026-58508 Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)
Two SSRF vulnerabilities in Gitea migration/mirror DNS rebinding + missing re-validation...
CVE-2026-58508
The Git repository management system Gitea contains two Server-Side Request Forgery (SSRF) vulnerabilities within its migration and mirror functions. The root causes are identified as DNS rebinding and a lack of re-validation , which may allow a remote attacker to induce the server to make unauth...
EUVD-2026-58169
Repository migration SSRF via multi-answer DNS allow-list bypass...
CVE-2026-58442 Repository migration SSRF via multi-answer DNS allow-list bypass
Repository migration SSRF via multi-answer DNS allow-list bypass...
CVE-2026-58442 Repository migration SSRF via multi-answer DNS allow-list bypass
Repository migration SSRF via multi-answer DNS allow-list bypass...
CVE-2026-58442
The Gitea software is vulnerable to a Server-Side Request Forgery (SSRF) during repository migration. This issue stems from a multi-answer DNS allow-list bypass specifically identified in the gitea.dev component. The vulnerability allows an attacker to bypass security restrictions to perform SSRF...
CVE-2026-58442 Repository migration SSRF via multi-answer DNS allow-list bypass
Repository migration SSRF via multi-answer DNS allow-list bypass...
CVE-2026-58420
Local File Inclusion via file:// URI in Migration Restore...
CVE-2026-58420 Local File Inclusion via file:// URI in Migration Restore
Local File Inclusion via file:// URI in Migration Restore...