Browse CVEs

HIGH 7.5 CVE-2026-58427 Private org member list leaked via /members API endpoint — incomplete fix for PR #38145 No fix yet Fix from $4,9002026-08-13 HIGH 7.5 CVE-2026-58417 REST API exposes organization membership of private organizations to public No fix yet Fix from $4,9002026-08-13 HIGH 7.7 CVE-2026-58314 Two SSRF findings in Gitea 1.26.2 No fix yet Fix from $4,9002026-08-13 HIGH 7.1 CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard) No fix yet Fix from $4,9002026-08-13 MEDIUM 6.5 CVE-2026-57897 Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs No fix yet Fix from $4,0002026-08-13 HIGH 8.5 CVE-2026-57894 Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration No fix yet Fix from $4,9002026-08-13 MEDIUM 5.9 CVE-2026-57886 Cross-repository issue/comment attachment re-linking can expose private attachment content No fix yet Fix from $4,0002026-08-13 CRITICAL 9.1 CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session No fix yet Fix from $5,7502026-08-13 CRITICAL 9.8 CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API No fix yet Fix from $5,7502026-08-13 CRITICAL 9.6 CVE-2026-56443 Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118 No fix yet Fix from $5,7502026-08-13 HIGH 8.1 CVE-2026-55987 OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009) No fix yet Fix from $4,9002026-08-13 MEDIUM 6.2 CVE-2026-56755 Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload No fix yet Fix from $4,0002026-08-13 MEDIUM 6.2 CVE-2026-56657 Gitea SSH Key Parser Denial of Service No fix yet Fix from $4,0002026-08-13 MEDIUM 5.4 CVE-2026-55986 Email Management API Bypasses ManageCredentials Feature Restrictions No fix yet Fix from $4,0002026-08-13 CRITICAL 9.1 CVE-2026-55982 OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes No fix yet Fix from $5,7502026-08-13 HIGH 7.5 CVE-2026-54481 Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295) No fix yet Fix from $4,9002026-08-13 HIGH 8.7 CVE-2026-55402 CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position c… No fix yet Fix from $4,9002026-08-13 MEDIUM 6.5 CVE-2026-42931 Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint No fix yet Fix from $4,0002026-08-13 HIGH 8.1 CVE-2026-24791 Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes Patch available Fix from $4,9002026-08-13 MEDIUM 6.5 CVE-2026-24059 The GET /api/v1/user/actions/runners/registration-token endpoint (and its owner- and repository-level equivalents) creates a new runner registration … Patch available Fix from $4,0002026-08-13 CRITICAL 9.1 CVE-2026-13051 Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an … Patch available Fix from $5,7502026-08-13 HIGH 8.2 CVE-2026-13048 Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon … Patch available Fix from $4,9002026-08-13 CRITICAL 9.1 CVE-2022-4993 HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_er… Patch available Fix from $5,7502026-08-13 MEDIUM 6.1 CVE-2026-73671 Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the u… No fix yet Fix from $4,0002026-08-13 HIGH 7.2 CVE-2026-73670 A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators to inject arbitrary SQL into a… No fix yet Fix from $4,9002026-08-13 MEDIUM 6.3 CVE-2026-73576 In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumen… No fix yet Fix from $4,0002026-08-13 MEDIUM 6.1 CVE-2026-73572 In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability exists in the Zimbra Classic Web Client due to insuff… No fix yet Fix from $4,0002026-08-13 HIGH 8.9 CVE-2026-73570 KEV A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP… Zimbra Collaboration Suite 10.1.20+ Fix from $4,9002026-08-13 MEDIUM 6.5 CVE-2026-73559 vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.26.0, the /v1/completions CompletionRequest.prompt field in vl… Patch available Fix from $4,0002026-08-13 CRITICAL 9.8 CVE-2026-73533 Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned upda… No fix yet Fix from $5,7502026-08-13