92639 matches found
CVE-2026-58425 OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)
OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...
CVE-2026-58425 OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)
OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...
CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
CVE-2026-56750
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
EUVD-2026-58145
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
CVE-2026-56750
The Gitea Git service is affected by a vulnerability where Remember-Me tokens can be stolen without invalidating the attacker's session. This flaw relates to improper access control and session management. The vulnerability was addressed in Gitea version 1.27.0 . Remediation is available via the ...
EUVD-2026-58142
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
CVE-2026-56443 Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
CVE-2026-56443
The Git repository management system Gitea is affected by a token public-only scope bypass vulnerability. This issue occurs on Limited-visibility owners (specifically involving Repository and Package categories) and is a residual issue from CVE-2026-25714. The root cause involves access control d...
CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API
Privilege Escalation via Access Token Scope Escalation in API...
CVE-2026-56443 Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
CVE-2026-56443 Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API
Privilege Escalation via Access Token Scope Escalation in API...
EUVD-2026-58143
Privilege Escalation via Access Token Scope Escalation in API...
CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API
Privilege Escalation via Access Token Scope Escalation in API...
CVE-2026-56654
The Gitea Project is affected by CVE-2026-56654 , a Critical severity vulnerability allowing for Privilege Escalation via Access Token Scope Escalation within the API. An attacker can manipulate the scope of an access token to gain unauthorized access to sensitive functions or data, potentially l...
CVE-2026-55982
The Gitea application is vulnerable to an issue where the OIDC userinfo Endpoint returns identity claims without enforcing API token scopes . This vulnerability allows for the exposure of sensitive information to unauthorized actors. Remediation is available in Gitea v1.27.0 , which includes fixe...