Gitea fix for missed token scope checking vulnerability

github.com 2026-07-04查看中文 →

Security AdvisoryMediumGitea

Affected:

Gitea 1.26.x

Fixed in:

1.27.0

Referenced CVEs: CVE-2026-20706

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Snipe-IT Multiple Controllers BOLA Vulnerability Fix (Missing Authorization on selectlist) 2026-07-09 Fluent Bit v1.19 out_http plugin SSRF mitigation via strict host validation (allowed_hosts param) 2026-07-09 Fluentd out_http Plugin SSRF Fix: allowed_hosts Parameter Implementation 2026-07-09 Fluentd out_http SSRF Vulnerability (CVE-2026-44161) Advisory 2026-07-09 Fluentd v1.19.3 Security Update: Strict Host Header Validation and Buffer Limits 2026-07-09

Offline Archive

Offline screenshot & PDF are Pro-exclusive