· zachyceno
KEV ✓ (1 z 2) EPSS 0.28 (nejvyšší)
Gitea 1.27.1 is released security patch
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-59774, CVE-2026-60004, Summary: This release addresses the following security vulnerabilities. Please upgrade as soon as possible. CVE-2026-59774: Unauthenticated arbitrary file read via the Org-mode #+INCLUDE directive. Fixed by #38642 / #38645. Thanks to @xbow-security and, independently, @NightRang3r for reporting the issue, and to @wxiaoguang and @TheFox0x7 for the patch. CVE-2026…
Gitea FI
CVE v události 2
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-59774 | 9.8 3.1 · CISA-ADP | – | 0.28 |
| CVE-2026-60004 | 9.8 3.1 · mitre | KEV ✓ | 0.24 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.8.