262051 matches found
CVE-2026-58419 Notification API leaks private issue metadata after access revocation
Notification API leaks private issue metadata after access revocation...
CVE-2026-58419
Notification API leaks private issue metadata after access revocation...
CVE-2026-58419
CVE-2026-58419 affects the Go-Gitea project where the Notification API can leak private issue metadata after access revocation. The Snyk notes describe Information Exposure in multiple internal components of the Gitea web feed/routers, convert, and git modules, with affected code paths in the Not...
CVE-2026-58524
Microsoft Edge (Chromium-based) has a cross-site scripting (XSS) vulnerability (CVE-2026-58524) due to improper input neutralization during web page generation, enabling spoofing over a network. The CVSS v3.1 base score is 5.4 (Medium) with network attack vector and user interaction required. Aff...
CVE-2026-58297 Microsoft Edge for Android Information Disclosure Vulnerability
...
CVE-2026-58294 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-58284 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-57974 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-57988
Relative path traversal in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-43000 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2025.2-fips, openstack-keystone-2026.1-fips, openstack-keystone-2025.2, openstack-keystone-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1...
GHSA-G27C-Q7CP-MHX6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-28699 Gitea Basic Auth bypasses OAuth2 access token scopes
Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypassed through HTTP Basic authentication...
CVE-2026-27660 Gitea draft releases use insufficient permission checks
Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...
CVE-2026-27657
CVE-2026-27657 affects Gitea prior to 1.25.5. The issue arises in the email settings workflow where a user can alter another user’s primary email address, described as an Authorization Bypass Through User-Controlled Key. Affected evidence in connected sources indicates the root cause is insuffici...
CVE-2026-27657 Gitea email settings allow changing another user's primary email address
Gitea versions before 1.25.5 allow a user to change another user's primary email address...
EUVD-2026-41624
Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...
CVE-2026-24451
Gitea 1.26.2 has an information exposure vulnerability where fork synchronization continues after the parent repo switches from public to private, allowing a fork to access data it should not be authorized to see. Connected sources identify this as affecting Gitea components through the fork sync...
CVE-2026-24690 Gitea pull-request branch updates use insufficient permission checks
Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches...
CVE-2026-14612
creationtimestamp| type| source ---|---|--- 2026-07-03 18:15:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr5p36m2x2g 2026-07-03 18:38:09+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpr6wxqjhl25...