https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:13:21.605986+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitea-2025-68941 BIT-gitea-2025-68941 2026-10-03T23:13:21.667430+00:00

Affected: Bitnami: gitea

Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.

 https://cve.radiocsirt.org/vuln/euvd-2026-264463 EUVD-2026-264463 2026-10-03T23:13:21.667519+00:00 EUVD-2026-264463 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68941 fkie_cve-2025-68941 2026-10-03T23:13:21.667537+00:00

Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.

 https://cve.radiocsirt.org/vuln/ghsa-xfq3-qj7j-4565 GHSA-xfq3-qj7j-4565 — Gitea mishandles access to a private resource upon receiving an API token with scope limited to public resources 2026-10-03T23:13:21.667559+00:00

Affected: Go: code.gitea.io/gitea

Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2925 WID-SEC-W-2025-2925 — Gitea: Mehrere Schwachstellen 2026-10-03T23:13:21.667580+00:00

Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um Dateien zu manipulieren.