Skip to content

CVE record · 1 source

CVE-2026-117685

The OCI registry's cross-repository blob mount checked the target package against the token's `public-only` restriction, but checked the source blob…

Vendor: Gitea
Product: Gitea
Weakness: CWE-863
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

20

CVE NVD 4h ago

The OCI registry's cross-repository blob mount checked the target package against the token's `public-only` restriction, but checked the source blob…

The OCI registry's cross-repository blob mount checked the target package against the token's `public-only` restriction, but checked the source blob only against the full account permissions of the token owner. A `public-only`…

CVE-2026-117685 Gitea