gitea

4 results · Clear filters · Feed

• Medium 5.9
  CVE-2023-48795 Public exploit EPSS 94%

  Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

  The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

  openssh lxd erlang openssh Debian Ubuntu Alpine PyPI Go crates.io
  Dec 18, 2023
• High 7.5
  CVE-2022-30781 Public exploit EPSS 88%

  Shell command injection in gitea

  Gitea before 1.16.7 does not escape git fetch remote.

  code.gitea.io/gitea gitea Alpine Go
  May 16, 2022
• Low 3.7
  CVE-2021-28378 Public exploit

  Cross-site Scripting in Gitea

  Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.

  code.gitea.io/gitea gitea Alpine Go
  Mar 15, 2021
• High 7.5
  CVE-2020-26160 Public exploit

  Authorization bypass in github.com/dgrijalva/jwt-go

  jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is the value of aud. This is a security problem if th…

  gitea golang-github-coreos-discovery-etcd-io github.com/dgrijalva/jwt-go/v4 golang-github-dgrijalva-jwt-go Debian Ubuntu Alpine Go
  Sep 30, 2020