govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSECoder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass7.4 Highgovulncheck-vulndbopenSUSECoder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking7.4 Highgovulncheck-vulndbopenSUSECiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation6.9 Mediumgovulncheck-vulndbopenSUSEFiber: HSTS header never set in helmet middleware due to incorrect protocol check4.8 Mediumgovulncheck-vulndbopenSUSETraefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth7.8 Highgovulncheck-vulndbopenSUSEDragonfly scheduler v1 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFile5.5 Mediumgovulncheck-vulndbopenSUSETraefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port6.3 Mediumgovulncheck-vulndbopenSUSEForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false6.9 Mediumgovulncheck-vulndbopenSUSECilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access9.2 Criticalgovulncheck-vulndbopenSUSEGitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write9.6 Criticalgovulncheck-vulndbopenSUSEPermanent Fork PR Workflow Approval Gate Bypass8.9 Highgovulncheck-vulndbopenSUSELFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories7.7 Highgovulncheck-vulndbopenSUSEImproper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts9.8 Criticalgovulncheck-vulndbopenSUSEUnauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service7.5 Highgovulncheck-vulndbopenSUSENotification API leaks private issue metadata after access revocation7.5 Highgovulncheck-vulndbopenSUSESSRF via HTTP Redirect in Repository Migration6.5 Mediumgovulncheck-vulndbopenSUSEGitea LFS object reuse bypasses Code-unit authorization7.1 Highgovulncheck-vulndbopenSUSEGitea repository dumps write release assets using unsafe path names5.3 Mediumgovulncheck-vulndbopenSUSEGitea pre-receive hook can miss branch-protection checks after scanner errors9.8 Criticalgovulncheck-vulndbopenSUSEGitea forwarded-proto handling allows public URL spoofing7.5 Highgovulncheck-vulndbopenSUSEGitea pre-receive hook permission cache allows full repository write access8.8 Highgovulncheck-vulndbopenSUSEGitea Composer package source links use insufficient permission checks8.2 Highgovulncheck-vulndbopenSUSEGitea repository feeds bypass API token scope enforcement4.3 Mediumgovulncheck-vulndbopenSUSEGitea draft releases use insufficient permission checks7.5 Highgovulncheck-vulndbopenSUSEGitea email settings allow changing another user's primary email address7.5 Highgovulncheck-vulndbopenSUSEGitea git grep search lacks a timeout7.5 Highgovulncheck-vulndbopenSUSEGitea LFS mirror synchronization bypasses migration HTTP transport restrictions9.8 Criticalgovulncheck-vulndbopenSUSEGitea OAuth2 PKCE S256 challenges are not enforced during token exchange9.1 Criticalgovulncheck-vulndbopenSUSEGitea OAuth2 authorization codes lack expiry and reuse enforcement9.1 Criticalgovulncheck-vulndbopenSUSEGitea tracked-time deletion can target entries from another issue5.3 Mediumgovulncheck-vulndbopenSUSEGitea template repository generation mishandles symlinked paths9.1 Criticalgovulncheck-vulndbopenSUSEGitea organization permission APIs expose private visibility information7.5 Highgovulncheck-vulndbopenSUSEGitea private organization labels are visible to unauthorized users7.5 Highgovulncheck-vulndbopenSUSEGitea pull-request branch updates use insufficient permission checks7.5 Highgovulncheck-vulndbopenSUSEGitea fork synchronization can expose private parent repository data7.5 Highgovulncheck-vulndbopenSUSEGitea webhook and migration allow-list filtering permits SSRF9.6 Criticalgovulncheck-vulndbopenSUSEGitea repository creation accepts invalid field values9.1 Criticalgovulncheck-vulndbopenSUSEGitea tracked-time list endpoint has insufficient permission checks5.3 Mediumgovulncheck-vulndbopenSUSEGitea Docker image trusts spoofable reverse-proxy headers by default9.8 Criticalgovulncheck-vulndbopenSUSEGitea TOTP single-use enforcement defect allows OTP replay7.1 Highgovulncheck-vulndbopenSUSEAlgernon: Server-side script source disclosure on Windows via NTFS filename8.7 Highgovulncheck-vulndbopenSUSEDragonfly Manager OAuth provider client_secret disclosure via unauthenticated GET /api/v1/oauth2.9 Lowgovulncheck-vulndbopenSUSESFTPGo: Stored XSS via inline parameter on public shares and user file download3.7 Lowgovulncheck-vulndbopenSUSESFTPGo: Path confinement bypass in public browsable share partial ZIP download5.9 Mediumgovulncheck-vulndbopenSUSECoder vulnerable to workspace auto-creation via crafted URL parameters without user consent8.1 Highgovulncheck-vulndbopenSUSEKerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect6.9 Mediumgovulncheck-vulndbopenSUSEContour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled6.5 Mediumgovulncheck-vulndbopenSUSEFiber: X-Real-IP Spoofing via Header.Add() in BalancerForward5.3 Mediumgovulncheck-vulndbopenSUSEFiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer5.3 Mediumgovulncheck-vulndbopenSUSEgoshs: Share-link ?token=… redemption races past download limit5.9 Medium- Show moreLoading…