Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:58:53 +0000 CVE-2026-27775 — Gitea pre-receive hook permission cache allows full repository write access https://vulnerability.circl.lu/vuln/cve-2026-27775 <p><strong>Affected:</strong> Gitea Open Source Git Server</p> <p>Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access.</p> <p><strong>Affected:</strong> Gitea Open Source Git Server</p> <p>Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access.</p> https://vulnerability.circl.lu/vuln/cve-2026-27775