Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...

CVE-2026-58289

creationtimestamp| type| source ---|---|--- 2026-07-03 22:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprkz3ncbz2e 2026-07-04 02:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprxujsddx25 2026-07-04 18:49:58+00:00| seen|...

CVE-2026-14608

creationtimestamp| type| source ---|---|--- 2026-07-03 22:09:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprkrr6muq25...

CVE-2026-52735

creationtimestamp| type| source ---|---|--- 2026-07-03 21:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprjo7adcd2x 2026-08-18 22:08:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfa54nnq52p...

CVE-2026-8925

creationtimestamp| type| source ---|---|--- 2026-07-03 21:38:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpriyry2yp2c 2026-07-15 16:40:07+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mqp5wvyuvz2h...

CVE-2026-11564

creationtimestamp| type| source ---|---|--- 2026-07-03 21:37:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprixk4pnm2d 2026-07-07 00:02:13+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mpzch7sg2t2o...

CVE-2026-8924

creationtimestamp| type| source ---|---|--- 2026-07-03 21:36:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprivwaz5n23...

CVE-2026-8458

creationtimestamp| type| source ---|---|--- 2026-07-03 21:34:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprisgsdu52f 2026-07-07 11:29:16+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq2itqu7tr2j 2026-07-07 11:29:20+00:00| seen|...

CVE-2026-8286

creationtimestamp| type| source ---|---|--- 2026-07-03 21:34:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprirlclji2k...

CVE-2026-11352

creationtimestamp| type| source ---|---|--- 2026-07-03 21:32:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprioe4hwb2n 2026-07-07 20:02:28+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq3fjgesej2n...

CVE-2026-10536

creationtimestamp| type| source ---|---|--- 2026-07-03 21:31:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprinqanou2j 2026-07-06 20:03:19+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mpyv3ztk4p2e...

CVE-2026-8927

creationtimestamp| type| source ---|---|--- 2026-07-03 21:31:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprimuqvxg23 2026-07-07 08:03:43+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq25e2xcpa2b...

CVE-2026-8926

creationtimestamp| type| source ---|---|--- 2026-07-03 21:31:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprim5aug32n...

CVE-2026-28740

Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access...

CVE-2026-14606

creationtimestamp| type| source ---|---|--- 2026-07-03 21:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mprgvyf4m226 2026-07-03 22:04:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprkisq4vw2r...

CVE-2026-14605

creationtimestamp| type| source ---|---|--- 2026-07-03 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mprgvrigd72r 2026-07-03 22:02:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mprkf6gjah2i 2026-07-03 22:19:59+00:00| seen|...

CVE-2026-28740

Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access...

CVE-2026-27771 Gitea Composer package source links use insufficient permission checks

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-27771 Gitea Composer package source links use insufficient permission checks

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-58379

creationtimestamp| type| source ---|---|--- 2026-07-03 19:39:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mprceilsjt24 2026-07-03 22:01:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mprkdhbnlb2f 2026-07-03 22:30:00+00:00| seen|...