agentprime: gitea

agentprime: giteaEvery new CVE for gitea.https://agentprime.io/CVE-2026-119627: Gitea limited-visibility profile disclosure with public-only tokenshttps://agentprime.io/advisories/CVE-2026-119627/https://agentprime.io/advisories/CVE-2026-119627/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:58 GMTCVECVE-2026-119625: Gitea user and organization feed token scope bypasshttps://agentprime.io/advisories/CVE-2026-119625/https://agentprime.io/advisories/CVE-2026-119625/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:57 GMTCVECVE-2026-119533: Gitea private pull request disclosure on project boardshttps://agentprime.io/advisories/CVE-2026-119533/https://agentprime.io/advisories/CVE-2026-119533/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:55 GMTCVECVE-2026-119441: Gitea public-only token bypass on bulk organization repository deletionhttps://agentprime.io/advisories/CVE-2026-119441/https://agentprime.io/advisories/CVE-2026-119441/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:54 GMTCVECVE-2026-118504: Gitea issue changes on archived repositories through the APIhttps://agentprime.io/advisories/CVE-2026-118504/https://agentprime.io/advisories/CVE-2026-118504/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:52 GMTCVECVE-2026-118395: Gitea public-only token bypass in repository and organization creationhttps://agentprime.io/advisories/CVE-2026-118395/https://agentprime.io/advisories/CVE-2026-118395/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:51 GMTCVECVE-2026-118394: Gitea OAuth2 userinfo private group disclosure to public-only tokenshttps://agentprime.io/advisories/CVE-2026-118394/https://agentprime.io/advisories/CVE-2026-118394/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:49 GMTCVECVE-2026-117685: Gitea public-only package token access to private OCI blobshttps://agentprime.io/advisories/CVE-2026-117685/https://agentprime.io/advisories/CVE-2026-117685/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:46 GMTCVECVE-2026-117677: Gitea Helm chart upload decompression denial of servicehttps://agentprime.io/advisories/CVE-2026-117677/https://agentprime.io/advisories/CVE-2026-117677/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:45 GMTCVECVE-2026-117649: Gitea private issue disclosure through issue dependency timeline eventshttps://agentprime.io/advisories/CVE-2026-117649/https://agentprime.io/advisories/CVE-2026-117649/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:43 GMTCVECVE-2026-117646: Gitea private repository listing to public-only tokens on profileshttps://agentprime.io/advisories/CVE-2026-117646/https://agentprime.io/advisories/CVE-2026-117646/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:42 GMTCVECVE-2026-117635: Gitea admin API public-only token scope bypasshttps://agentprime.io/advisories/CVE-2026-117635/https://agentprime.io/advisories/CVE-2026-117635/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:40 GMTCVECVE-2026-116474: Gitea Actions job token spoofing of instance-signed commitshttps://agentprime.io/advisories/CVE-2026-116474/https://agentprime.io/advisories/CVE-2026-116474/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:38 GMTCVECVE-2026-116296: Gitea archived repository release, milestone and label modificationhttps://agentprime.io/advisories/CVE-2026-116296/https://agentprime.io/advisories/CVE-2026-116296/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:37 GMTCVECVE-2026-116289: Gitea public-only token bypass through Actions runner registrationhttps://agentprime.io/advisories/CVE-2026-116289/https://agentprime.io/advisories/CVE-2026-116289/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:35 GMTCVECVE-2026-114199: Gitea contribution heatmap private activity disclosure to public-only tokenshttps://agentprime.io/advisories/CVE-2026-114199/https://agentprime.io/advisories/CVE-2026-114199/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:33 GMTCVECVE-2026-113429: Gitea stored XSS through legacy Actions artifact Content-Encodinghttps://agentprime.io/advisories/CVE-2026-113429/https://agentprime.io/advisories/CVE-2026-113429/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:32 GMTCVECVE-2026-112887: Gitea Actions task token private repository enumerationhttps://agentprime.io/advisories/CVE-2026-112887/https://agentprime.io/advisories/CVE-2026-112887/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:48:30 GMTCVECVE-2026-120263: Gitea OAuth2 account auto-linking takeover through the sign-up formhttps://agentprime.io/advisories/CVE-2026-120263/https://agentprime.io/advisories/CVE-2026-120263/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:47:09 GMTCVECVE-2026-118386: Gitea Actions fork workflow trust through pull request review commithttps://agentprime.io/advisories/CVE-2026-118386/https://agentprime.io/advisories/CVE-2026-118386/Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 09:47:07 GMTCVECVE-2026-97859: Gitea API disclosure of private user social graph, keys and starshttps://agentprime.io/advisories/CVE-2026-97859/https://agentprime.io/advisories/CVE-2026-97859/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 19:01:04 GMTCVECVE-2026-97204: Gitea label deletion across repository and organization IDshttps://agentprime.io/advisories/CVE-2026-97204/https://agentprime.io/advisories/CVE-2026-97204/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 19:00:50 GMTCVECVE-2026-110494: Gitea release attachment re-linking of issue attachmentshttps://agentprime.io/advisories/CVE-2026-110494/https://agentprime.io/advisories/CVE-2026-110494/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:57:26 GMTCVECVE-2026-110324: Gitea private profile information disclosure through POST requesthttps://agentprime.io/advisories/CVE-2026-110324/https://agentprime.io/advisories/CVE-2026-110324/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:57:20 GMTCVECVE-2026-110311: Gitea draft release creation disclosing attachment metadatahttps://agentprime.io/advisories/CVE-2026-110311/https://agentprime.io/advisories/CVE-2026-110311/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:57:14 GMTCVECVE-2026-109844: Gitea watched repositories API disclosure after access revocationhttps://agentprime.io/advisories/CVE-2026-109844/https://agentprime.io/advisories/CVE-2026-109844/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:57:08 GMTCVECVE-2026-107686: Gitea reactions accepted on locked issues and commentshttps://agentprime.io/advisories/CVE-2026-107686/https://agentprime.io/advisories/CVE-2026-107686/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:56:59 GMTCVECVE-2026-107618: Gitea cross-site request forgery on repository topicshttps://agentprime.io/advisories/CVE-2026-107618/https://agentprime.io/advisories/CVE-2026-107618/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:56:53 GMTCVECVE-2026-105964: Gitea Actions artifact v4 API unbounded request bodyhttps://agentprime.io/advisories/CVE-2026-105964/https://agentprime.io/advisories/CVE-2026-105964/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:56:47 GMTCVECVE-2026-105661: Gitea panic on the repositories route of individual usershttps://agentprime.io/advisories/CVE-2026-105661/https://agentprime.io/advisories/CVE-2026-105661/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:56:41 GMTCVECVE-2026-109553: Gitea SSH certificate principal impersonation of other usershttps://agentprime.io/advisories/CVE-2026-109553/https://agentprime.io/advisories/CVE-2026-109553/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:51:31 GMTCVECVE-2026-104627: Gitea OpenID account linking without session bindinghttps://agentprime.io/advisories/CVE-2026-104627/https://agentprime.io/advisories/CVE-2026-104627/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:51:06 GMTCVECVE-2026-78433: Gitea private attachment disclosure through repository mismatchhttps://agentprime.io/advisories/CVE-2026-78433/https://agentprime.io/advisories/CVE-2026-78433/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:38:17 GMTCVECVE-2026-78231: Gitea blind SSRF through OpenID assertion verificationhttps://agentprime.io/advisories/CVE-2026-78231/https://agentprime.io/advisories/CVE-2026-78231/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:38:10 GMTCVECVE-2026-73814: Gitea repository ownership escalation by administratorshttps://agentprime.io/advisories/CVE-2026-73814/https://agentprime.io/advisories/CVE-2026-73814/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:38:05 GMTCVECVE-2026-73804: Gitea API token scope escalation through HTTP signatureshttps://agentprime.io/advisories/CVE-2026-73804/https://agentprime.io/advisories/CVE-2026-73804/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:38:00 GMTCVECVE-2026-73800: Gitea reusable workflow secret exposure in pull_request_targethttps://agentprime.io/advisories/CVE-2026-73800/https://agentprime.io/advisories/CVE-2026-73800/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:37:49 GMTCVECVE-2026-73539: Gitea external renderer argument injection and code executionhttps://agentprime.io/advisories/CVE-2026-73539/https://agentprime.io/advisories/CVE-2026-73539/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:37:44 GMTCVECVE-2026-73535: Gitea second-factor bypass through OpenID identity linkinghttps://agentprime.io/advisories/CVE-2026-73535/https://agentprime.io/advisories/CVE-2026-73535/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:37:39 GMTCVECVE-2026-73273: Gitea Maven checksum upload quota bypass and memory exhaustionhttps://agentprime.io/advisories/CVE-2026-73273/https://agentprime.io/advisories/CVE-2026-73273/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:37:30 GMTCVECVE-2026-73135: Gitea hidden-owner repository listing disclosurehttps://agentprime.io/advisories/CVE-2026-73135/https://agentprime.io/advisories/CVE-2026-73135/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:37:25 GMTCVECVE-2026-73130: Gitea repository initialization resource exhaustionhttps://agentprime.io/advisories/CVE-2026-73130/https://agentprime.io/advisories/CVE-2026-73130/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:37:20 GMTCVECVE-2026-73126: Gitea private workflow badge token scope bypasshttps://agentprime.io/advisories/CVE-2026-73126/https://agentprime.io/advisories/CVE-2026-73126/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:37:15 GMTCVECVE-2026-71301: Gitea private pull request title disclosure through markuphttps://agentprime.io/advisories/CVE-2026-71301/https://agentprime.io/advisories/CVE-2026-71301/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:37:10 GMTCVECVE-2026-71184: Gitea fork workflow approval bypass through review eventshttps://agentprime.io/advisories/CVE-2026-71184/https://agentprime.io/advisories/CVE-2026-71184/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:37:05 GMTCVECVE-2026-70407: Gitea organization listing token scope bypasshttps://agentprime.io/advisories/CVE-2026-70407/https://agentprime.io/advisories/CVE-2026-70407/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:36:59 GMTCVECVE-2026-70406: Gitea private comparison disclosure with public-only tokenshttps://agentprime.io/advisories/CVE-2026-70406/https://agentprime.io/advisories/CVE-2026-70406/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:36:53 GMTCVECVE-2026-70402: Gitea local code execution through writable Git hookshttps://agentprime.io/advisories/CVE-2026-70402/https://agentprime.io/advisories/CVE-2026-70402/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:36:46 GMTCVECVE-2026-70400: Gitea private migration creation with public-only tokenshttps://agentprime.io/advisories/CVE-2026-70400/https://agentprime.io/advisories/CVE-2026-70400/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:36:41 GMTCVECVE-2026-70396: Gitea organization repository creation token scope bypasshttps://agentprime.io/advisories/CVE-2026-70396/https://agentprime.io/advisories/CVE-2026-70396/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:36:36 GMTCVE