Private Repository Existence Disclosure via go-get Meta Endpoint
CVE-2026-58507
Private Repository Existence Disclosure via go-get Meta Endpoint
#cwe-284
共收录 1981 条相关情报。
← 返回所有主题Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content (incomplete revocation cleanup in `Del...
CVE-2026-58440
Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of pr
Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag
CVE-2026-58439
Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag
Repository Visibility Manipulation via Git Push Options
CVE-2026-58437
Repository Visibility Manipulation via Git Push Options
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
CVE-2026-58429
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
Local File Inclusion via file:// URI in Migration Restore
CVE-2026-58420
Local File Inclusion via file:// URI in Migration Restore
REST API exposes organization membership of private organizations to public
CVE-2026-58417
REST API exposes organization membership of private organizations to public
Gitea Remember-Me Token Theft Not Invalidating Attacker Session
CVE-2026-56750
Gitea Remember-Me Token Theft Not Invalidating Attacker Session
Privilege Escalation via Access Token Scope Escalation in API
CVE-2026-56654
Privilege Escalation via Access Token Scope Escalation in API
Email Management API Bypasses ManageCredentials Feature Restrictions
CVE-2026-55986
Email Management API Bypasses ManageCredentials Feature Restrictions
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service
CVE-2026-55984
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)
CVE-2026-54526
### Summary The allow-list fix for CVE-2026-31892 (GHSA-3wf5-g532-rcrr), and its follow-up coverage of `hostNetwork`/`s
JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). A missing 'await' caused the is_install_allowed...
CVE-2026-73626
JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.i
CWE-284: Improper Access Control
CVE-2026-59505
CWE-284: Improper Access Control
CWE-284: Improper Access Control
CVE-2026-59501
CWE-284: Improper Access Control
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in...
CVE-2026-13367
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an...
CVE-2026-59914
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoo
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper...
CVE-2026-59917
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerab
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.
CVE-2026-13367
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could ...
CVE-2026-59917
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerab