Gitea: Notification API leaks private issue metadata after access revocation
CVE-2026-58419
# Summary An information disclosure issue in the Gitea Notification API allows users who have lost access to a private
#go
共收录 737 条相关情报。
← 返回所有主题Gitea: Unauthorized Access to Labels of Private Organizations
CVE-2026-25038
## Summary Gitea 1.26.2 does not properly enforce organization visibility restrictions on organization label read endpo
Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write
CVE-2026-27775
## Vulnerability Header | Field | Value
Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private
CVE-2026-24451
### Summary The `POST /api/v1/repos/{owner}/{repo}/merge-upstream` endpoint continues to synchronize commits from a par
Gitea: Two SSRF findings
CVE-2026-58314
| --- | --- | | Versions tested | `gitea/gitea:1.26.2` (digest `sha256:7d13848af12645600a5f9d93ee2560daa9c6fa6b5b859b7bf
Gitea: ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests
CVE-2026-58436
### Summary The Locale middleware that runs in front of every unauthenticated request calls `golang.org/x/text/language
Gitea SSH Key Parser Denial of Service
CVE-2026-56657
Gitea's SSH key ingestion endpoint accepts keys in RFC 4716 (SSH2) format and normalises them before storage. The normal
Gitea: Repository Visibility Manipulation via Git Push Options
CVE-2026-58437
### Repository Visibility Manipulation via Git Push Options | Field | Value | |-------|-------| | **Affected File** | `
Gitea: OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009)
CVE-2026-55987
## Description Gitea's OAuth2 sign-in callback reactivates a deactivated user account (`IsActive=false`) when the user
File Browser: Colliding username normalization gives two users the same home directory
CVE-2026-62685
## Summary FileBrowser confines each user to a *scope*: a home directory that acts as the boundary for everything they
File Browser: Share API exposes the password hash and bypass token
CVE-2026-62684
## Summary When a user creates a password-protected share or lists existing shares, the JSON response includes the full
File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)
CVE-2026-62843
## Summary The fix for `GHSA-gxjx-7m74-hcq8` / `CVE-2026-54093` (shipped in v2.63.6) added a `strings.ReplaceAll(nameIn
Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies
### Summary A wrong policy can be an open door. You have to check `input.attributes.request.http.truncated_body` in yo
Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication
CVE-2026-54246
## Description The `routesrv` component exposes the full cluster route topology (Ingress/RouteGroup configurations, bac
Gitea has insufficient permission checks for Composer package source links
CVE-2026-27771
### CVE Description Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package s
oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code
## Summary The vulnerability in oapi-codegen seems to be similar with CVE-2026-22785, which is a generated-code inject
Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS
CVE-2026-54247
## Summary The Kubernetes admission webhook handler reads the entire request body using `io.ReadAll(r.Body)` without an
kuma-dp connects to control plane without verifying TLS certificate when no CA is configured
CVE-2026-52724
When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane co
Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container
CVE-2026-52832
## Summary Nuclio Dashboard exposes `POST /api/functions` without authentication by default (NOP auth mode). The `spec.
Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE
CVE-2026-52833
## Summary Nuclio's Java runtime generates a `build.gradle` file during function builds using Go's `text/template` pack