Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (127 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-59763 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 4.3 Medium
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads
CVE-2026-58511 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 2.7 Low
Webhook Authorization Header Returned in Plaintext via API
CVE-2026-57897 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 6.5 Medium
Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs
CVE-2026-56755 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 6.2 Medium
Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload
CVE-2026-24791 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 8.1 High
Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes
CVE-2026-58437 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Repository Visibility Manipulation via Git Push Options
CVE-2026-58439 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag
CVE-2026-23603 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim
CVE-2026-42931 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint
CVE-2026-56654 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Privilege Escalation via Access Token Scope Escalation in API
CVE-2026-58443 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Public-only repository tokens can update private PR head branches
CVE-2026-58445 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API
CVE-2026-57894 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration
CVE-2026-58314 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Two SSRF findings in Gitea 1.26.2
CVE-2026-58420 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Local File Inclusion via file:// URI in Migration Restore
CVE-2026-58442 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Repository migration SSRF via multi-answer DNS allow-list bypass
CVE-2026-58444 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents
CVE-2026-59765 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata
CVE-2026-58417 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
REST API exposes organization membership of private organizations to public
CVE-2026-58425 1 Gitea 1 Gitea Open Source Git Server 2026-08-13 N/A
OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)