Поиск уязвимостей
Количество 5
Количество 5
CVE-2026-20779
Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-use enforcement defect that allows a valid TOTP code to be accepted more than once across web two-factor authentication flows and the Basic Auth X-Gitea-OTP path.
CVE-2026-20779
Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-use enforce ...
GHSA-gx3v-q759-g323
Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface
ALT-PU-2026-14138
ALT-PU-2026-14138: package `gitea` update to version 1.27.2-alt1
ALT-PU-2026-16069
ALT-PU-2026-16069: package `gitea` update to version 1.27.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-20779 Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-use enforcement defect that allows a valid TOTP code to be accepted more than once across web two-factor authentication flows and the Basic Auth X-Gitea-OTP path. | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| CVE-2026-20779 Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-use enforce ... | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| GHSA-gx3v-q759-g323 Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ALT-PU-2026-14138 ALT-PU-2026-14138: package `gitea` update to version 1.27.2-alt1 | CVSS3: 9.8 | 2 месяца назад | |
| ALT-PU-2026-16069 ALT-PU-2026-16069: package `gitea` update to version 1.27.3-alt1 | CVSS3: 9.8 | около 2 месяцев назад |
Уязвимостей на страницу