https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T23:35:29.558404+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitea-2022-38183 BIT-gitea-2022-38183 2026-10-17T23:35:29.564224+00:00

Affected: Bitnami: gitea

In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker would get access to private issue titles.

 https://cve.radiocsirt.org/vuln/euvd-2026-18979 EUVD-2026-18979 2026-10-17T23:35:29.564303+00:00 EUVD-2026-18979 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38183 fkie_cve-2022-38183 2026-10-17T23:35:29.564321+00:00

In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker would get access to private issue titles.

 https://cve.radiocsirt.org/vuln/ghsa-fhv8-m4j4-cww2 GHSA-fhv8-m4j4-cww2 — Gitea allowed assignment of private issues 2026-10-17T23:35:29.564359+00:00

Affected: Go: code.gitea.io/gitea

In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker would get access to private issue titles.

 https://cve.radiocsirt.org/vuln/gsd-2022-38183 gsd-2022-38183 2026-10-17T23:35:29.564395+00:00 gsd-2022-38183 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-38183 UBUNTU-CVE-2022-38183 2026-10-17T23:35:29.564407+00:00

Affected: Ubuntu:18.04:LTS: golang-code.gitea-git, Ubuntu:18.04:LTS: golang-code.gitea-sdk, Ubuntu:20.04:LTS: golang-code.gitea-git, Ubuntu:20.04:LTS: golang-code.gitea-sdk, Ubuntu:22.04:LTS: golang-code.gitea-git, Ubuntu:22.04:LTS: golang-code.gitea-sdk

In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker would get access to private issue titles.