CVE-2026-73814

The Gitea software contains a privilege escalation vulnerability in the collaboration access-mode endpoint . An authenticated repository collaborator with Admin access can exploit this flaw to promote their permissions to Owner . Once elevated, the attacker can perform owner-only operations, such...

CVE-2022-37866: Improper Limitation of a Pathname to a Restricted Directory

When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "pattern" that may include placeholders for artifacts coordinates like the organisation, module or version. If said coordinates contain "../" sequences - which are valid characte...