Threats Tagged 'ghsa-xmj7-xj85-hfc3'
View all threats tagged with 'ghsa-xmj7-xj85-hfc3'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-xmj7-xj85-hfc3'
Click on any threat for detailed analysis and mitigation recommendations
Gitea: SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL (CVE-2026-58441)CVE-2026-58441 0 Gitea contains a Server-Side Request Forgery (SSRF) vulnerability in its restore-repo CLI command due to improper validation of the pull_request.yml Head.CloneURL field. The safety check intended to validate this URL is disabled by passing an empty base URL, allowing attacker-controlled URLs to be used in git fetch commands. This can lead to SSRF attacks against internal services or disclosure of local git repositories accessible via file:// URLs. The vulnerability affects versions prior to 1.27.0. No remote code execution via git transport helpers was found. No public exploit is known. Join the discussion | GCVE Database | 07/21/2026, 20:37:29 UTC Added: 07/22/2026, 00:11:36 UTC |
Showing 1 to 1 of 1 result