Advisory Catalog

Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API

Gitea: Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents

Gitea: Public-only repository tokens can update private PR head branches

Gitea: Repository migration SSRF via multi-answer DNS allow-list bypass

Gitea: SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL

Gitea: Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write

Gitea: Permanent Fork PR Workflow Approval Gate Bypass

Gitea: LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories

Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service

Gitea: SSRF via HTTP Redirect in Repository Migration

Gitea: API access token scope enforcement bypass on repository RSS/Atom feed endpoints leaks private repository commit data

Gitea: Git LFS object reuse allows non-Code access to authorize private source objects

Gitea Docker image: `REVERSE_PROXY_TRUSTED_PROXIES = *` default lets any source IP impersonate any user via `X-WEBAUTH-USER`

Gitea: Incomplete SSRF Protection in Webhook and Migration Allow-list Default Filter

Gitea: API Fork Endpoint Authorization Bypass Allows Organization Members to Bypass Repository Creation Restrictions

Gitea: Privilege Escalation via Access Token Scope Escalation in API

Gitea: Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload

Gitea: Private Repository Existence Disclosure via go-get Meta Endpoint

Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content

Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim

Gitea: OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)

Gitea: Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

Gitea Remember-Me Token Theft Not Invalidating Attacker Session

Gitea: draft release attachment disclosure via missing web authorization

Gitea: Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)

Gitea: Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118

Gitea: Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag

Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times`

Gitea: Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content

Gitea: Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration

File Browser: Colliding username normalization gives two users the same home directory

File Browser: Share API exposes the password hash and bypass token

File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)

File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope

File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup

Cloudreve: Non-admin remote download users can SSRF loopback/internal services and read imported responses

Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim

Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies

Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication

Gitea has insufficient permission checks for Composer package source links

oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code

Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS

kuma-dp connects to control plane without verifying TLS certificate when no CA is configured

Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container

Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE

Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode

Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure

Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header