Gitea Fix smart-HTTP API Token Scope Check Bypass (PR #37583)

github.com 2026-07-04查看中文 →

Security AdvisoryMediumGitea

Affected:

go-gitea/gitea all versions using smart-HTTP authentication

Referenced CVEs: CVE-2026-28744 · 8.1

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Traefik v3.7.5 Security Patch: Ingress Nginx Secret Resolution and TLS Router Fixes 2026-07-22 DOM-Based XSS via Unsandboxed iframe srcdoc in n8n HTML Preview 2026-07-22 n8n @n8n/computer-use Shell Sandbox Not Enforced on Linux/Windows (GHSA-fpg6-x68q-5793) 2026-07-22 Privilege Escalation in Grav Login Plugin via Mass-Assignment on Profile Update 2026-07-22 Traefik Gateway API Namespace Confusion Vulnerability (CWE-863) 2026-07-22

Offline Archive

Offline screenshot & PDF are Pro-exclusive