Threats Tagged 'ghsa-7wvc-rvp7-w99x'
View all threats tagged with 'ghsa-7wvc-rvp7-w99x'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-7wvc-rvp7-w99x'
Click on any threat for detailed analysis and mitigation recommendations
Gitea: LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories (CVE-2026-58423)CVE-2026-58423 0 A vulnerability in Gitea's SSH LFS sub-verb handling allows any authenticated SSH user to bypass access controls and obtain valid LFS credentials for private repositories they do not have permission to access. This flaw enables unauthorized read access to all LFS objects in any private repository on the instance. The issue arises because unknown LFS sub-verbs cause the permission check to incorrectly grant access. This affects Gitea versions from 1.23.0 up to but not including 1.26.3. No official patch or fix has been confirmed yet. Join the discussion | GCVE Database | 07/21/2026, 20:35:09 UTC Added: 07/03/2026, 22:50:05 UTC |
Showing 1 to 1 of 1 result