95099 matches found
CVE-2026-58425
The Gitea application is vulnerable to an information disclosure flaw where OAuth token introspection returns metadata for tokens issued to other clients, violating RFC 7662 section 4 . This issue was addressed in Gitea v1.27.0 . Exploitation details are not provided in the documentation, but the...
CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
EUVD-2026-58145
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
CVE-2026-56750
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
CVE-2026-56750
The Gitea Git service is affected by a vulnerability where Remember-Me tokens can be stolen without invalidating the attacker's session. This flaw relates to improper access control and session management. The vulnerability was addressed in Gitea version 1.27.0 . Remediation is available via the ...
CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API
Privilege Escalation via Access Token Scope Escalation in API...
CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API
Privilege Escalation via Access Token Scope Escalation in API...
CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API
Privilege Escalation via Access Token Scope Escalation in API...
CVE-2026-56443 Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
EUVD-2026-58142
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
CVE-2026-56443 Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
CVE-2026-56654
Privilege Escalation via Access Token Scope Escalation in API...
CVE-2026-56443 Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
CVE-2026-56654
The Gitea Project is affected by CVE-2026-56654 , a Critical severity vulnerability allowing for Privilege Escalation via Access Token Scope Escalation within the API. An attacker can manipulate the scope of an access token to gain unauthorized access to sensitive functions or data, potentially l...
CVE-2026-56443
The Git repository management system Gitea is affected by a token public-only scope bypass vulnerability. This issue occurs on Limited-visibility owners (specifically involving Repository and Package categories) and is a residual issue from CVE-2026-25714. The root cause involves access control d...
EUVD-2026-58143
Privilege Escalation via Access Token Scope Escalation in API...