| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-67577 | Gitea restricted-user activity and heatmap disclosure | Gitea | Gitea | - | - | 2026-10-14 14:36:17 | Deep Dive |
| CVE-2026-66877 | Gitea fork workflow approval bypass through concurrency cancellation | Gitea | Gitea | - | - | 2026-10-14 14:36:11 | Deep Dive |
| CVE-2026-66874 | Gitea required Actions check bypass through skipped workflows | Gitea | Gitea | - | - | 2026-10-14 14:36:06 | Deep Dive |
| CVE-2026-66853 | Gitea restricted-user organization metadata disclosure | Gitea | Gitea | - | - | 2026-10-14 14:36:01 | Deep Dive |
| CVE-2026-66849 | Gitea restricted-user package visibility bypass | Gitea | Gitea | - | - | 2026-10-14 14:35:56 | Deep Dive |
| CVE-2026-84471 | OpenVPN 2.6.0-2.6.22/2.7.7内存泄漏漏洞 | OpenVPN | OpenVPN | High | 7.2 | 2026-10-14 14:29:05 | Deep Dive |
| CVE-2026-63792 | Gitea private reusable workflow disclosure to fork runs | Gitea | Gitea | - | - | 2026-10-14 14:29:02 | Deep Dive |
| CVE-2026-63021 | Gitea Swift package manifest memory exhaustion | Gitea | Gitea | - | - | 2026-10-14 14:28:57 | Deep Dive |
| CVE-2026-62925 | Gitea Alpine package parsing memory exhaustion | Gitea | Gitea | - | - | 2026-10-14 14:28:51 | Deep Dive |
| CVE-2026-60021 | Gitea GitLab migration denial of service | Gitea | Gitea | - | - | 2026-10-14 14:28:46 | Deep Dive |
| CVE-2026-60018 | Gitea OneDev migration denial of service | Gitea | Gitea | - | - | 2026-10-14 14:28:41 | Deep Dive |
| CVE-2026-60010 | Gitea organization team policy bypass through repository API | Gitea | Gitea | - | - | 2026-10-14 14:28:36 | Deep Dive |
| CVE-2026-60008 | Gitea Jupyter notebook UI redress through CSS class injection | Gitea | Gitea | - | - | 2026-10-14 14:28:31 | Deep Dive |
| CVE-2026-59774 📌 💣 | Gitea Org-mode file disclosure and code execution EPSS 0.28 | Gitea | Gitea | - | - | 2026-10-14 14:28:26 | Deep Dive |
| CVE-2026-59766 | Gitea private repository metadata disclosure after access revocation | Gitea | Gitea | - | - | 2026-10-14 14:28:21 | Deep Dive |
| CVE-2026-25946 | Gitea OpenID discovery server-side request forgery | Gitea | Gitea | - | - | 2026-10-14 14:28:16 | Deep Dive |
| CVE-2026-110650 | Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths | anshulkharb | thumbnail | Critical | 9.8 | 2026-10-14 14:17:18 | Deep Dive |
| CVE-2026-110649 | Stills before 25.24.2 OS Command Injection via Media File Names | shahkashani | stills | Critical | 9.8 | 2026-10-14 14:17:17 | Deep Dive |
| CVE-2026-110647 | Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Names | jinghaihan | turnpress | High | 7.8 | 2026-10-14 14:17:16 | Deep Dive |
| CVE-2026-110648 | @offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Names | adamarcanov | compress-fonts | High | 7.8 | 2026-10-14 14:17:16 | Deep Dive |