Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the process handling Composer package source links. An attacker can gain unauthorized access to private or internal package source information by directly accessing these links...

CVE-2026-58426

creationtimestamp| type| source ---|---|--- 2026-07-03 22:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprl4pas652r 2026-07-04 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116858764503193267 2026-07-04 00:01:05+00:00| seen|...

CVE-2026-27771

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

cvss-exploit-evaluator

CVSS & Exploit Evaluator A professional Claude Skill...

CVE-2026-27771

CVE-2026-27771 affects Gitea container registry prior to 1.26.2. The root cause is ReqContainerAccess not enforcing per-owner visibility, allowing ghost users (UserID: -1) to access private container images via standard OCI/Docker endpoints. Impact: unauthenticated access can expose private/inter...

CVE-2026-27771

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-27771 Gitea Composer package source links use insufficient permission checks

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-27771 Gitea Composer package source links use insufficient permission checks

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information...

CVE-2026-14612

creationtimestamp| type| source ---|---|--- 2026-07-03 18:15:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr5p36m2x2g 2026-07-03 18:38:09+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpr6wxqjhl25...

CVE-2026-56015

creationtimestamp| type| source ---|---|--- 2026-07-03 14:26:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqquiykdy2k 2026-07-03 14:57:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpqslp3c2k24 2026-07-04 04:13:10+00:00| seen|...

CVE-2026-13341

creationtimestamp| type| source ---|---|--- 2026-07-03 12:11:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpqjcqu2mf2r 2026-07-03 13:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116856286666318310 2026-07-03 13:30:31+00:00| seen|...

RUSTSEC-2026-0198 `Report::frames_mut` allows aliased mutable references

Affected versions of this crate return an iterator from Report::framesmut whose &mut Frame items have lifetimes independent of the iterator, so all yielded references can be held at the same time. A yielded frame's sources are also yielded by the iterator and reachable through the parent frame vi...

CVE-2026-14544

creationtimestamp| type| source ---|---|--- 2026-07-03 10:21:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqd6zl5f622 2026-07-03 10:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116855578805749180 2026-07-03 10:30:31+00:00| seen|...

CVE-2026-10140

creationtimestamp| type| source ---|---|--- 2026-07-03 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpptcdyxjl2i 2026-07-03 07:32:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzrbt4q727 2026-07-09 01:47:27+00:00| seen|...

CVE-2026-53357

creationtimestamp| type| source ---|---|--- 2026-07-03 04:37:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116854189956800499 2026-07-03 07:14:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyqck3e627 2026-07-04 03:44:19+00:00| seen|...

GHSA-84HP-MQVJ-3P8H

creationtimestamp| type| source ---|---|--- 2026-07-03 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116853809243699371 2026-07-03 03:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mppkkiqr622k...

CVE-2026-13368

creationtimestamp| type| source ---|---|--- 2026-07-03 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116853455394559161 2026-07-03 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mppfjee3ij2p 2026-07-03 02:07:01+00:00| seen|...

CVE-2022-50973

creationtimestamp| type| source ---|---|--- 2026-07-02 19:14:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpoqi7o6gp2f 2026-07-02 19:45:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mposbcvlax2n 2026-07-02 20:30:04+00:00| seen|...

CVE-2026-56004

creationtimestamp| type| source ---|---|--- 2026-07-02 17:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj4u4vxb2v 2026-07-02 19:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoqdaf76u2v 2026-07-03 07:19:31+00:00| seen|...