Логотип exploitDog
bind:CVE-2026-20888
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2026-20888

Количество 3

Количество 3

nvd логотип

CVE-2026-20888

17 дней назад

Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface. A user with read access to pull requests may be able to cancel auto-merges scheduled by other users.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2026-20888

17 дней назад

Gitea does not properly verify authorization when canceling scheduled ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-9cgq-wp42-4rpq

17 дней назад

Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-20888

Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface. A user with read access to pull requests may be able to cancel auto-merges scheduled by other users.

CVSS3: 4.3
0%
Низкий
17 дней назад
debian логотип
CVE-2026-20888

Gitea does not properly verify authorization when canceling scheduled ...

CVSS3: 4.3
0%
Низкий
17 дней назад
github логотип
GHSA-9cgq-wp42-4rpq

Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface

0%
Низкий
17 дней назад

Уязвимостей на страницу