CVE-2026-107618None▾ Sunlit`POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection, so a request issued by a third-party site was not rejected. A repository administrator who visited a malicious page co…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
POST /{owner}/{repo}/topics was registered without the sign-in middleware that provides the cross-origin protection, so a request issued by a third-party site was not rejected. A repository administrator who visited a malicious page could have the topics of their repository changed. No other repository settings were reachable through this route.
gitea.dev <= 28.1.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109553NoneGitea SSH certificate principal impersonation of other users
CVE-2026-105661NoneGitea panic on the repositories route of individual users
CVE-2026-107686NoneGitea reactions accepted on locked issues and comments
CVE-2026-110494NoneGitea release attachment re-linking of issue attachments
CVE-2026-97204NoneGitea label deletion across repository and organization IDs
CVE-2026-110324NoneGitea private profile information disclosure through POST request