https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:11:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-16352 bdu:2025-16352 https://cve.radiocsirt.org/vuln/bdu:2025-16352 https://cve.radiocsirt.org/vuln/euvd-2026-264410 EUVD-2026-264410 https://cve.radiocsirt.org/vuln/euvd-2026-264410 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68937 <p>Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for template repositories. This is also fixed for 11 LTS in 11.0.7 and later.</p> <p>Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for template repositories. This is also fixed for 11 LTS in 11.0.7 and later.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-68937 https://cve.radiocsirt.org/vuln/ghsa-7mhf-6fhv-c83c <p>Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for template repositories. This is also fixed for 11 LTS in 11.0.7 and later.</p> <p>Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for template repositories. This is also fixed for 11 LTS in 11.0.7 and later.</p> https://cve.radiocsirt.org/vuln/ghsa-7mhf-6fhv-c83c https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2925 <p>Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um Dateien zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2925