Search Results (87 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-58418 1 Gitea 1 Gitea Open Source Git Server 2026-07-06 6.5 Medium
SSRF via HTTP Redirect in Repository Migration
CVE-2026-58419 1 Gitea 1 Gitea Open Source Git Server 2026-07-06 7.5 High
Notification API leaks private issue metadata after access revocation
CVE-2026-58421 1 Gitea 1 Gitea Open Source Git Server 2026-07-06 7.5 High
Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service
CVE-2026-58422 1 Gitea 1 Gitea Open Source Git Server 2026-07-06 9.8 Critical
Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts
CVE-2026-58423 1 Gitea 1 Gitea Open Source Git Server 2026-07-06 7.7 High
LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories
CVE-2026-58424 1 Gitea 1 Gitea Open Source Git Server 2026-07-06 8.9 High
Permanent Fork PR Workflow Approval Gate Bypass
CVE-2026-58426 1 Gitea 1 Gitea Open Source Git Server 2026-07-06 9.6 Critical
Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write