CVE-2026-42931

Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint

MediumCWE-770 All CVEs

Weakness

Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint

References

https://blog.gitea.com/gitea-1.27.0-is-released/
https://github.com/go-gitea/gitea/releases/tag/v1.27.0
https://github.com/go-gitea/gitea/security/advisories/GHSA-wwqq-x6w4-frm2

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.

Start a free audit See pricing