漏洞公告

Gitea git grep searches allow server resource exhaustion

Gitea template repository generation follows unsafe filesystem paths

Gitea exposes tracked time entries without repository authorization

Gitea repository creation accepts insufficiently validated fields

Gitea OAuth2 authorization codes can be reused after expiry

Gitea primary email ownership bypass allows cross-user email changes

Gitea pull request branch permission checks allow unauthorized updates and rebases

Gitea organization permission APIs expose hidden membership and private organization data

Keras: Lambda deserialization can bypass safe mode and execute code

Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING

golang.org/x/image/tiff has excessive resource consumption in PackBits decompression

9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass

Kiwi TCMS's /init-db/ page renders and responds to requests after first use

LaunchServer FileServerHandler has an unauthenticated path traversal issue

SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo`

Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename

jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow

jxl-oxide: `FrameBuffer::new` creates out-of-bounds slices on overflow

jxl-oxide: integer subtraction overflow panic in cluster_from_table via crafted JXL input (DoS)

Kimai Favorite Timesheet Add and Remove Endpoints Allows Cross-User Bookmark Manipulation

Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection