The vulnerability of the API that binds repositories to teams in the Git repository management system Gitea allows a hacker to increase their privileges.

The vulnerability of the API that binds repositories to Git repository management systems like Gitea is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

PT-2026-51630

Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.14.3 Description Git LFS storage is content-addressed by OID Object Identifier alone, while per-repository authorization is managed in the lfs object table. The serveUpload function skips the re-upload process when an...