Veille CVE

Lundi 6 juillet 2026

21 CVE

Critique 5 Élevée 10 Moyenne 6 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « git » ✕
  1. CVE-2026-22555 8.1 Élevée

    Gitea Open Source Git Server

    Gitea versions before 1.26.0 allow API users to fork a repository into an organization without first passing the CanCreateOrgRepo check, which can expose organization secrets.

  2. CVE-2026-53314 5.5 Moyenne

    Linux · Linux linux kernel

    In the Linux kernel, the following vulnerability has been resolved: padata: Put CPU offline callback in ONLINE section to allow failure syzbot reported the following warning: DEAD callback error for CPU1 WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020 kernel/cpu.c:1463, CPU#0: syz.0.1960/14614 at commit 4ae12d8bd9a8 ("Merge tag 'kbuild-fixes-7.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux") which tglx traced to padata_cpu_dead() given it's the only sub-CPUHP_TEARDOWN_CPU callback that returns an error. Failure isn't allowed in hotplug states before CPUHP_TEARDOWN_CPU so move the CPU offline callback to the ONLINE section where failure is possible.

  3. CVE-2026-20706 9.1 Critique

    Gitea Open Source Git Server

    Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass token scope checks on the web archive download endpoint.

  4. CVE-2026-14722 7.3 Élevée

    tiddly-gittly TidGi-Desktop

    A vulnerability was found in tiddly-gittly TidGi-Desktop up to 0.13.0. This impacts an unknown function of the file src/services/wiki/wikiWorker/loadWikiTiddlersWithSubWikis.ts of the component Git Repository Import. The manipulation results in code injection. The attack may be performed from remote. The exploit has been made public and could be used.

  5. CVE-2026-58424 8.9 Élevée

    Gitea Open Source Git Server

    Permanent Fork PR Workflow Approval Gate Bypass

  6. CVE-2026-58423 7.7 Élevée

    Gitea Open Source Git Server

    LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories

  7. CVE-2026-58422 9.8 Critique

    Gitea Open Source Git Server

    Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts

  8. CVE-2026-58421 7.5 Élevée

    Gitea Open Source Git Server

    Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service

  9. CVE-2026-58419 7.5 Élevée

    Gitea Open Source Git Server

    Notification API leaks private issue metadata after access revocation

  10. CVE-2026-58418 6.5 Moyenne

    Gitea Open Source Git Server

    SSRF via HTTP Redirect in Repository Migration

  11. CVE-2026-58426 9.6 Critique

    Gitea Open Source Git Server

    Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write

  12. CVE-2026-28744 8.1 Élevée

    Gitea Open Source Git Server

    Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with bearer tokens to bypass repository token scope checks.

  13. CVE-2026-28699 8.1 Élevée

    Gitea Open Source Git Server

    Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypassed through HTTP Basic authentication.

  14. CVE-2026-27783 4.3 Moyenne

    Gitea Open Source Git Server

    Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on issue-template API endpoints.

  15. CVE-2026-27780 9.8 Critique

    Gitea Open Source Git Server

    Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks.

  16. CVE-2026-27779 7.5 Élevée

    Gitea Open Source Git Server

    Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation.

  17. CVE-2026-27775 8.8 Élevée

    Gitea Open Source Git Server

    Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository write access.

  18. CVE-2026-4322 6.1 Moyenne

    Raera - Ankara Web Design and Digital Advertising Agency Destekz

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Raera - Ankara Web Design and Digital Advertising Agency Destekz allows Reflected XSS. This issue affects Destekz: through 02062026. NOTE: The vendor was contacted and it was learned that the product is not supported.

  19. CVE-2026-4321 9.8 Critique

    Raera - Ankara Web Design and Digital Advertising Agency Destekz

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Raera - Ankara Web Design and Digital Advertising Agency Destekz allows SQL Injection. This issue affects Destekz: through 02062026. NOTE: The vendor was contacted and it was learned that the product is not supported.

  20. CVE-2026-14340 5.0 Moyenne

    GitHub Enterprise Server

    An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App installation to perform certain write operations on public repositories outside the token's intended scope. This was possible because the authorization check only verified that the installation had read permissions on the target repository rather than verifying that the token's installation was explicitly granted access to that repository. An attacker who obtained a victim's user-to-server token could create issues, issue comments, commit comments, and private vulnerability reports on any public repository, appearing as the victim user with no indication of the app involvement. This vulnerability was fixed by adding a repository scope check for user-to-server tokens issued by global apps. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.22 and was fixed in versions 3.21.2, 3.20.4, 3.19.8, 3.18.11, 3.17.17, 3.16.20. This vulnerability was reported via the GitHub Bug Bounty program.

  21. CVE-2026-53139 5.5 Moyenne

    Linux · Linux linux kernel

    In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Skip CSD when it has zeroed workgroups A compute shader dispatch encodes its workgroup counts in the CFG0..CFG2 registers. Kicking off a dispatch with a zero count in any of the three dimensions is invalid. First, the hardware will process 0 as 65536, while the user-space driver exposes a maximum of 65535. Over that, a submission with a zeroed workgroup dimension should be a no-op. These zeroed counts can reach the dispatch path through an indirect CSD job, whose workgroup counts are only known once the indirect buffer is read and may legitimately be zero, but such scenario should only result in a no-op. Overwrite the indirect CSD job workgroup counts with the indirect BO ones, even if they are zeroed, and don't submit the job to the hardware when any of the workgroup counts is zero, so the job completes immediately instead of running the shader.