<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: gitea-open-source-git-server</title><description>Every new CVE for gitea-open-source-git-server.</description><link>https://agentprime.io/</link><item><title>CVE-2026-24059: Gitea runner registration-token GET endpoint performs a write under a read-only token scope</title><link>https://agentprime.io/advisories/CVE-2026-24059/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24059/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Aug 2026 16:48:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-58508: Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)</title><link>https://agentprime.io/advisories/CVE-2026-58508/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58508/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Aug 2026 16:44:57 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-58433: Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting</title><link>https://agentprime.io/advisories/CVE-2026-58433/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-58433/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Aug 2026 16:44:50 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-55986: Email Management API Bypasses ManageCredentials Feature Restrictions</title><link>https://agentprime.io/advisories/CVE-2026-55986/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55986/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Aug 2026 16:44:41 GMT</pubDate><category>CVE</category></item></channel></rss>