Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content

GHSA-6c6r-5xr4-cr5m CVE-2026-57886 MODERATE 7 days ago

## Summary Gitea's issue and comment attachment update paths accept attachment UUIDs without verifying that each attachment belongs to the target ...

go

No PRs yet

Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim

GHSA-x77v-q46j-393g CVE-2026-23603 LOW 7 days ago

### Summary When `[oauth2_client] UPDATE_AVATAR = true` is enabled, Gitea fetches the avatar URL received from an OAuth2/OIDC provider using Go's d...

go

No PRs yet

Gitea: OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)

GHSA-vxv2-8j6r-pcpg CVE-2026-58425 MODERATE 7 days ago

## Live reproduction against Gitea 1.26.1 Setup: Gitea 1.26.1 docker stack with two users (`admin` and `victim`) and two OAuth applications owned ...

go

No PRs yet

Gitea: Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

GHSA-9mq6-mqjj-c2c5 CVE-2026-59763 MODERATE 7 days ago

## Summary Hello Gitea Security Team, Thank you for your continued work on Gitea. I would like to responsibly report a potential availability-imp...

go

No PRs yet

Gitea Remember-Me Token Theft Not Invalidating Attacker Session

GHSA-rgv6-xp99-6mgj CVE-2026-56750 CRITICAL 7 days ago

The vulnerability is in the Remember-Me (gitea_incredible) token validation logic, specifically when handling a compromised token (hash mismatch). ...

go

No PRs yet

Gitea: draft release attachment disclosure via missing web authorization

GHSA-q9pg-jj6x-j9p6 CVE-2026-58432 MODERATE 7 days ago

### Summary Gitea's draft-release access control is enforced only on the API release endpoints (`/api/v1/repos/{owner}/{repo}/releases/{id}` and i...

go

No PRs yet

Gitea: Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)

GHSA-25gq-j9jx-43pg CVE-2026-58428 MODERATE 7 days ago

## Summary The web handler `EditReleasePost` (`routers/web/repo/release.go`) reads form fields with prefix `attachment-edit-{uuid}` into a `map[uu...

go

No PRs yet

Gitea: Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118

GHSA-7p4h-3gxq-x3h3 CVE-2026-56443 MODERATE 7 days ago

## Summary After [PR #37118](https://github.com/go-gitea/gitea/pull/37118) / **CVE-2026-25714** (`fix: Unify public-only token filtering in API qu...

go

No PRs yet

Gitea: Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag

GHSA-w5pg-649r-p6gg CVE-2026-58439 HIGH 7 days ago

## Summary Gitea does not re-evaluate the `official` flag on existing pull request reviews when a PR's target branch is changed. An attacker with ...

go

No PRs yet

Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times`

GHSA-qf2f-qh6p-7v89 CVE-2026-59766 MODERATE 7 days ago

## Summary CVE-2026-20800 fixed private-info leakage to revoked users only for the notification endpoint. Two sibling endpoints that return data ke...

go

No PRs yet

Gitea: Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content

GHSA-66m4-5jjr-2rg5 CVE-2026-58440 MODERATE 7 days ago

## Affected product Gitea — `services/repository/collaboration.go` (`DeleteCollaboration`) + webhook delivery ## Summary When a collaborator with ...

go

No PRs yet

GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`

GHSA-956x-8gvw-wg5v HIGH 7 days ago

## Summary GitPython spawns the real `git` binary with an argument vector built from caller-supplied values. To prevent argument injection, GitPyt...

pypi

4

Dependabot PRs

GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist

GHSA-2f96-g7mh-g2hx HIGH 8 days ago

## Command injection via long-option prefix abbreviation bypassing `check_unsafe_options` (incomplete fix of CVE-2026-42215 / GHSA-rpm5-65cw-6hj4) ...

pypi

No PRs yet

GitPython unsafe clone option gate bypass through joined short options

GHSA-v396-v7q4-x2qj HIGH 8 days ago

`GitPython` version `3.1.50` blocks unsafe `git clone` options such as `--upload-pack`, `-u`, `--config`, and `-c` unless callers explicitly pass `...

pypi

No PRs yet

SVGO removeScripts plugin leaves some executable scripts intact

GHSA-2p49-hgcm-8545 HIGH 8 days ago

### Summary SVGO's removeScripts plugin (disabled by default) removes scripts from the SVG, however executable scripts were left intact in some ca...

npm

No PRs yet

DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

GHSA-c2j3-45gr-mqc4 LOW 8 days ago

## Summary There is a possible hook-policy inconsistency in DOMPurify 3.4.11 involving `CUSTOM_ELEMENT_HANDLING`. When a custom element is allowe...

npm

No PRs yet

jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

GHSA-mhm7-754m-9p8w MODERATE 8 days ago

## Summary In `BeanDeserializer.deserializeUsingPropertyBasedWithExternalTypeId`, the active-view (`@JsonView`) filter was applied only to the reg...

maven

No PRs yet

@vitest/browser: Browser Mode provider commands bypass the file-access permission gate

GHSA-p63j-vcc4-9vmv CRITICAL 8 days ago

## Summary Browser Mode exposes a set of built-in "commands" that run on the Node.js side of the test runner and can touch the local filesystem (t...

npm

No PRs yet

Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry

GHSA-pf56-329r-95rw CVE-2026-59891 CRITICAL 8 days ago

### Impact This is a credential-exposure / credential-confusion issue. `getRegistryCredentials()` reads credentials from the Docker config file (...

npm

No PRs yet

jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy

GHSA-3pjw-73gf-8qr5 CVE-2026-59888 MODERATE 8 days ago

## Summary For Java Records, `POJOPropertiesCollector._removeUnwantedIgnorals()` records a `@JsonIgnore`-annotated component under its original imp...

maven

No PRs yet

Gitea: Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration

GHSA-82f7-87hm-852x CVE-2026-57894 HIGH 8 days ago

# Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration ## Summary Gite...

go

No PRs yet

pyasn1: Uncontrolled resource consumption when converting decoded REAL values

GHSA-hm4w-wwcw-mr6r CVE-2026-59886 HIGH 8 days ago

### Impact The univ.Real type converted its (mantissa, base, exponent) value to a Python float using exact big-integer exponentiation. A BER/CER/DE...

pypi

7

Dependabot PRs

pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

GHSA-8ppf-4f7h-5ppj CVE-2026-59885 HIGH 8 days ago

### Impact The BER/CER/DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A small cra...

pypi

7

Dependabot PRs

pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs

GHSA-m4p7-r5rc-7g4j CVE-2026-59884 HIGH 8 days ago

### Impact The BER decoder (shared by the CER and DER codecs) parses long-form tags by accumulating continuation octets in a loop with no upper bou...

pypi

7

Dependabot PRs

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

GHSA-h35f-9h28-mq5c CVE-2026-59890 MODERATE 8 days ago

## Summary When building a source distribution (`python -m build --sdist` / `setup.py sdist`), setuptools' `FileList` applies `MANIFEST.in` direct...

pypi

10

Dependabot PRs

OpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed header

GHSA-45rx-2jwx-cxfr CVE-2026-59892 HIGH 8 days ago

## Summary `@opentelemetry/propagator-jaeger` decodes incoming HTTP header values with `decodeURIComponent()` without handling decode errors. A si...

npm

No PRs yet

linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

GHSA-v245-v573-v5vm CVE-2026-59887 HIGH 8 days ago

### Summary `linkify-it`'s schema-scan loop (`.test()` / `.match()`, the documented public API) invokes the `mailto:` schema validator at **every**...

npm

No PRs yet

aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling

GHSA-vcrf-j523-4mrf CVE-2026-13760 HIGH 8 days ago

### Summary AWS CDK (aws-cdk-lib) is an open-source framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormat...

npm

No PRs yet

fast-uri vulnerable to host confusion via failed IDN canonicalization

GHSA-4c8g-83qw-93j6 CVE-2026-13676 HIGH 8 days ago

### Impact `fast-uri` versions `>= 2.3.1, <= 4.0.0` fail to canonicalize Unicode/IDN hostnames for HTTP-family URLs. The IDN conversion path calls...

npm

26

Dependabot PRs

Immutabl: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

GHSA-xvcm-6775-5m9r CVE-2026-59880 HIGH 8 days ago

## Summary `Immutable.Map` and `Immutable.Set` keep keys that share the same 32-bit hash in a collision bucket that is scanned linearly. The strin...

npm

9

Dependabot PRs

Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

GHSA-v56q-mh7h-f735 CVE-2026-59879 HIGH 8 days ago

## Summary `List#set`, `List#setSize`, `List#setIn`, `List#updateIn` (and the functional `set` / `setIn` / `updateIn`) mishandle an index or size ...

npm

9

Dependabot PRs

guzzlehttp/psr7: Host Confusion via Weak URI Host Validation

GHSA-c2w2-prh8-qm98 CVE-2026-59882 MODERATE 8 days ago

### Impact `guzzlehttp/psr7` did not reject URI host components containing authority delimiters (`/`, `?`, `#`, `@`, or `\`), an embedded port suc...

packagist

1

Dependabot PRs

websocket-driver-ruby: Denial of service via malformed Host header

GHSA-2x63-gw47-w4mm CVE-2026-61666 HIGH 8 days ago

### Impact If this library is used to implement a WebSocket server on top of a TCP server, by using the `WebSocket::Driver.server()` method, then ...

rubygems

No PRs yet

hono/jsx does not isolate context per request, leading to cross-request data disclosure

GHSA-hvrm-45r6-mjfj CVE-2026-59896 MODERATE 8 days ago

### Summary `hono/jsx` did not isolate context values per request during server-side rendering. While an async component was suspended on `await`,...

npm

5

Dependabot PRs

Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility

GHSA-w62v-xxxg-mg59 CVE-2026-59895 MODERATE 8 days ago

### Summary `cx()` in `hono/css` composes class names from plain strings but marks the result as already-escaped without HTML-escaping the input. ...

npm

5

Dependabot PRs

Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication

GHSA-xgm2-5f3f-mvvc CVE-2026-59897 MODERATE 8 days ago

### Summary The AWS API Gateway v1 adapter can drop a distinct repeated request header value. When a header appears multiple times, the adapter de...

npm

4

Dependabot PRs

Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)

GHSA-frvp-7c67-39w9 MODERATE 8 days ago

The same as the `hono` core [Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)](https://github.com/honojs/hono/security/adv...

npm

2

Dependabot PRs

PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms

GHSA-j92g-9f8w-j867 CVE-2026-54291 HIGH 8 days ago

### Impact `channelBinding=require` connections can be silently downgraded from `SCRAM-SHA-256-PLUS` (with channel binding) to plain `SCRAM-SHA-25...

maven

1

Dependabot PRs

Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability

GHSA-j8gr-8fp3-5q5h CVE-2026-56170 HIGH 8 days ago

# Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability ## Executive summary Microsoft is releasing this security adv...

nuget

No PRs yet

Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability

GHSA-55jh-fwmh-39m4 CVE-2026-50526 HIGH 8 days ago

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SDK (Microsoft.NET.Build.C...

nuget

No PRs yet

Microsoft Security Advisory CVE-2026-47300 – .NET Elevation of Privilege Vulnerability

GHSA-8prm-248r-h957 CVE-2026-47300 HIGH 8 days ago

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core Negotiate Authenti...

nuget

No PRs yet

Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability

GHSA-2p3q-h3hg-jcqq CVE-2026-47303 HIGH 8 days ago

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core Negotiate Authenti...

nuget

No PRs yet

Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability

GHSA-mmjf-rqrv-855v CVE-2026-50527 HIGH 8 days ago

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption (System.Sec...

nuget

No PRs yet

Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability

GHSA-2969-4q4w-w5h3 CVE-2026-50650 HIGH 8 days ago

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation...

nuget

No PRs yet

Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references

GHSA-8whx-365g-h9vv LOW 8 days ago

## Summary `Loofah::HTML5::Scrub.allowed_uri?` does not correctly reject `javascript:` URIs when the scheme is split or prefixed by the HTML5 name...

rubygems

No PRs yet

Guzzle: URI fragments disclosed in redirect Referer headers

GHSA-h95v-h523-3mw8 MODERATE 8 days ago

### Impact When the optional `referer` redirect setting is enabled, affected versions of `RedirectMiddleware` can copy the fragment from the refer...

packagist

1

Dependabot PRs

Guzzle: Host-only cookie scope is not preserved

GHSA-wm3w-8rrp-j577 MODERATE 8 days ago

### Impact In affected versions, `CookieJar` does not preserve whether a response cookie was set without a `Domain` attribute or with an empty one...

packagist

1

Dependabot PRs

Guzzle: Unbounded response cookies risk denial of service

GHSA-f283-ghqc-fg79 MODERATE 8 days ago

### Impact In affected versions, Guzzle's built-in `CookieJar` accepts any number of `Set-Cookie` header fields from one response, with no limit o...

packagist

1

Dependabot PRs

Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered

GHSA-8mv7-9c27-98vc MODERATE 8 days ago

## Summary In the composable `astro/hono` pipeline, the `security.checkOrigin` protection is only installed by the `middleware()` primitive. The `...

npm

No PRs yet

@astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escaped

GHSA-hp3v-mfqw-h74c LOW 8 days ago

## Summary The `@astrojs/netlify` adapter converts each `image.remotePatterns` entry into a regular expression that is written to `.netlify/v1/con...

npm

No PRs yet