Поиск уязвимостей
Количество 2
Количество 2
CVE-2026-101023
Gitea's OAuth2 token endpoint verified the signature and grant of a token submitted with the `refresh_token` grant type, but not that the token was a refresh token. An unexpired access token for the same OAuth2 application and grant could be exchanged for a new access token and refresh token. Whoever holds such an access token could keep access beyond the token's original lifetime.
ALT-PU-2026-18334
ALT-PU-2026-18334: package `gitea` update to version 28.1.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-101023 Gitea's OAuth2 token endpoint verified the signature and grant of a token submitted with the `refresh_token` grant type, but not that the token was a refresh token. An unexpired access token for the same OAuth2 application and grant could be exchanged for a new access token and refresh token. Whoever holds such an access token could keep access beyond the token's original lifetime. | CVSS3: 9.1 | 0% Низкий | около 1 месяца назад |
| ALT-PU-2026-18334 ALT-PU-2026-18334: package `gitea` update to version 28.1.0-alt1 | CVSS3: 9.8 | 7 дней назад |
Уязвимостей на страницу