https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T08:42:53.283044+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-20897 CVE-2026-20897 — Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR) 2026-10-16T08:42:53.564882+00:00

Affected: Gitea Open Source Git Server, Red Hat OpenShift Pipelines

Gitea does not properly validate repository ownership when deleting Git LFS locks. A user with write access to one repository may be able to delete LFS locks belonging to other repositories.