CVE-2026-28740

Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access.

AltaCWE-639CWE-863 Tutte le CVE

Debolezza

Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access.

Riferimenti

https://blog.gitea.com/release-of-1.26.3-and-1.26.4/
https://github.com/go-gitea/gitea/pull/38050
https://github.com/go-gitea/gitea/releases/tag/v1.26.3
https://github.com/go-gitea/gitea/security/advisories/GHSA-2m9v-5q2g-58vq

Trova il bug prima di un attaccante.

Accedi con GitHub e avvia il tuo primo audit in meno di un minuto. Il piano gratuito non richiede carta di credito.

Avvia un audit gratuito Vedi i prezzi