🚨 CVE-2026-56750
Gitea Remember-Me Token Theft Not Invalidating Attacker Session

🎖@cveNotify

🚨 CVE-2026-56755
Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload

🎖@cveNotify

🚨 CVE-2026-57886
Cross-repository issue/comment attachment re-linking can expose private attachment content

🎖@cveNotify

🚨 CVE-2026-57894
Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration

🎖@cveNotify

🚨 CVE-2026-57897
Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs

🎖@cveNotify

🚨 CVE-2026-58314
Two SSRF findings in Gitea 1.26.2

🎖@cveNotify

🚨 CVE-2026-58416
Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)

🎖@cveNotify

🚨 CVE-2026-58420
Local File Inclusion via file:// URI in Migration Restore

🎖@cveNotify

🚨 CVE-2026-58425
OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)

🎖@cveNotify

🚨 CVE-2026-58427
Private org member list leaked via /members API endpoint — incomplete fix for PR #38145

🎖@cveNotify

🚨 CVE-2026-58428
Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)

🎖@cveNotify

🚨 CVE-2026-58429
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

🎖@cveNotify

🚨 CVE-2026-58431
Public-only API token restriction is not enforced on team API routes

🎖@cveNotify

🚨 CVE-2026-58432
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea

🎖@cveNotify

🚨 CVE-2026-58433
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting

🎖@cveNotify

🚨 CVE-2026-58434
Private Repository Metadata Remains Accessible After Access Revocation

🎖@cveNotify

🚨 CVE-2026-58435
Gitea LFS Deploy-Key Privilege Escalation

🎖@cveNotify

🚨 CVE-2026-58436
ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests

🎖@cveNotify

🚨 CVE-2026-58437
Repository Visibility Manipulation via Git Push Options

🎖@cveNotify

🚨 CVE-2026-58438
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

🎖@cveNotify

🚨 CVE-2026-58439
Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag

🎖@cveNotify