https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:08:06.049834+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07479 bdu:2026-07479 2026-10-04T01:08:06.140731+00:00 bdu:2026-07479 https://cve.radiocsirt.org/vuln/euvd-2026-333740 EUVD-2026-333740 2026-10-04T01:08:06.140766+00:00 EUVD-2026-333740 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27771 fkie_cve-2026-27771 2026-10-04T01:08:06.140781+00:00

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.

 https://cve.radiocsirt.org/vuln/ghsa-8qw8-rq86-9pc2 GHSA-8qw8-rq86-9pc2 — Gitea has insufficient permission checks for Composer package source links 2026-10-04T01:08:06.140811+00:00

Affected: Go: code.gitea.io/gitea

### CVE Description Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.

### Summary A critical vulnerability has been discovered in Gitea. It was already reported via (security@gitea.io) from (dev@noscope.com), and submitted an encrypted report.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1637 WID-SEC-W-2026-1637 — Gitea: Mehrere Schwachstellen 2026-10-04T01:08:06.140837+00:00

Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um möglicherweise erweiterte Privilegien zu erlangen, Sicherheitsmaßnahmen zu umgehen oder Daten zu manipulieren und offenzulegen.