2026

Adding attachments to a release checked the repository and release of an attachment but not whether it was already linke

The visibility check of Gitea user profiles was applied to GET requests only, while `POST /{username}` (follow and unfol

Creating a draft release through the API returned an `assets` list that was built from a release without an ID, which ma

`GET /api/v1/user/subscriptions` returned the metadata of every repository a user was watching without checking that the

Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only p

The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users w

`POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection, s

The Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limit. A user who

Requesting `/{username}/-/repositories` for an individual user instead of an organization made the organization home han

The Gitea OpenID association callback in the security settings accepted a positive OpenID 2.0 assertion without checking

The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness

A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the funct

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that overruns its segment

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key offset from persis

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task_struct->sched_cache_grp

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't run ops.dequeue() with a DSQ lock

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before ree

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting

In the Linux kernel, the following vulnerability has been resolved: audit: fix exe mark UAF in kill_rules() kill_rules

In the Linux kernel, the following vulnerability has been resolved: fprobe: Use guard(rcu_sched_notrace) and check rcu_

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssize_t when checking hid_bp

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix task_work add use-after-free with SQP

In the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache growth ip_vs_lblc

In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkpro

In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after ch

In the Linux kernel, the following vulnerability has been resolved: of/overlay: only treat a positive changeset id as r

In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP

In the Linux kernel, the following vulnerability has been resolved: net: extend IPv6 exthdr detection of tunneled packe

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: drop flowtable referen

In the Linux kernel, the following vulnerability has been resolved: net/packet: prevent TX_RING byte count overflow tp

In the Linux kernel, the following vulnerability has been resolved: pfcp: fix socket lifetime on netdevice registration

In the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Assign .num before accessing .hws Comm

In the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state before requesting

In the Linux kernel, the following vulnerability has been resolved: sctp: check RCV_SHUTDOWN after the sendmsg connect

In the Linux kernel, the following vulnerability has been resolved: tpm: Disable TPM on null key name mismatch The nul

In the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache when extending a fi

In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to avoid writin

In the Linux kernel, the following vulnerability has been resolved: module: fix lost error code from codetag_load_modul

In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driver_data before registering n

In the Linux kernel, the following vulnerability has been resolved: vc_screen: reload vc pointer before if (ret) in vcs

In the Linux kernel, the following vulnerability has been resolved: vt: selection: Fix unsigned underflow and slab-out-

In the Linux kernel, the following vulnerability has been resolved: vt: skip screen update for DEC alignment test on ba

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: unregister the input device when probe

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Eac

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Fix array boundary check

In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device I

In the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() with the master MTD

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkg_tryget_closest()