https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 07:27:43 +0000 https://cve.radiocsirt.org/vuln/bit-gitea-2026-20883 <p><strong>Affected:</strong> Bitnami: gitea</p> <p>Gitea&#39;s stopwatch API does not re-validate repository access permissions. After a user&#39;s access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches.</p> <p><strong>Affected:</strong> Bitnami: gitea</p> <p>Gitea&#39;s stopwatch API does not re-validate repository access permissions. After a user&#39;s access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches.</p> https://cve.radiocsirt.org/vuln/bit-gitea-2026-20883 https://cve.radiocsirt.org/vuln/euvd-2026-266521 EUVD-2026-266521 https://cve.radiocsirt.org/vuln/euvd-2026-266521 https://cve.radiocsirt.org/vuln/fkie_cve-2026-20883 <p>Gitea&#39;s stopwatch API does not re-validate repository access permissions. After a user&#39;s access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches.</p> <p>Gitea&#39;s stopwatch API does not re-validate repository access permissions. After a user&#39;s access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-20883 https://cve.radiocsirt.org/vuln/ghsa-j8xr-c56q-m8jj <p><strong>Affected:</strong> Go: github.com/go-gitea/gitea</p> <p>Gitea&#39;s stopwatch API does not re-validate repository access permissions. After a user&#39;s access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches.</p> <p><strong>Affected:</strong> Go: github.com/go-gitea/gitea</p> <p>Gitea&#39;s stopwatch API does not re-validate repository access permissions. After a user&#39;s access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches.</p> https://cve.radiocsirt.org/vuln/ghsa-j8xr-c56q-m8jj https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0200 <p>Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0200