CVE-2026-117677

When parsing an uploaded Helm chart, Gitea decompressed the archive and read every tar entry while looking for Chart.yaml without limiting the decompressed size, and did so before the package size quota was checked; the quota only considers the compressed upload size. A user with package write...

CVE-2026-117677 Gitea Helm chart upload decompression denial of service

When parsing an uploaded Helm chart, Gitea decompressed the archive and read every tar entry while looking for Chart.yaml without limiting the decompressed size, and did so before the package size quota was checked; the quota only considers the compressed upload size. A user with package write...

CVE-2026-117677 Gitea Helm chart upload decompression denial of service

When parsing an uploaded Helm chart, Gitea decompressed the archive and read every tar entry while looking for Chart.yaml without limiting the decompressed size, and did so before the package size quota was checked; the quota only considers the compressed upload size. A user with package write...

EUVD-2026-114800

When parsing an uploaded Helm chart, Gitea decompressed the archive and read every tar entry while looking for Chart.yaml without limiting the decompressed size, and did so before the package size quota was checked; the quota only considers the compressed upload size. A user with package write...

CVE-2026-117677

The Gitea platform is vulnerable to a denial of service (DoS) attack during the parsing of uploaded Helm charts . The root cause is that the application decompresses the archive and reads every tar entry to locate Chart.yaml without enforcing a limit on the decompressed size, performing this acti...

PT-2026-134876

When parsing an uploaded Helm chart, Gitea decompressed the archive and read every tar entry while looking for Chart.yaml without limiting the decompressed size, and did so before the package size quota was checked; the quota only considers the compressed upload size. A user with package write...

CVE-2026-62925

Summary The Alpine package upload handler parses the uploaded ".apk" before any package-size quota check, and neither the decompressed stream nor the number of "provides=" / "depend=" entries in ".PKGINFO" is bounded. A registered user can upload a small, highly compressible ".apk" whose ".PKGINF...