Threats Tagged 'ghsa-fq2p-5p22-8g6j'
View all threats tagged with 'ghsa-fq2p-5p22-8g6j'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-fq2p-5p22-8g6j'
Click on any threat for detailed analysis and mitigation recommendations
Gitea: Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints (CVE-2026-58429)CVE-2026-58429 0 A vulnerability in Gitea allows personal access tokens restricted to the public-only scope to bypass intended access controls and retrieve private organization membership and permission details for the token owner's account via certain API endpoints. Although direct access to private organizations is blocked, indirect endpoints such as user organization listings and permission queries do not consistently enforce the public-only restriction, exposing private organization data. This is due to inconsistent middleware enforcement and route-specific authorization failures. Join the discussion | GCVE Database | 07/21/2026, 21:56:04 UTC Added: 07/22/2026, 00:11:14 UTC |
Showing 1 to 1 of 1 result