govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEfrp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow8.7 Highgovulncheck-vulndbopenSUSECloudreve: Unauthorized file write via WOPI view sessions whose access token secret is ignored6.3 Mediumgovulncheck-vulndbopenSUSEwebtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules5.3 Mediumgovulncheck-vulndbopenSUSECloudreve: OAuth Admin.Read scope can update OneDrive storage policy credentials7.1 Highgovulncheck-vulndbopenSUSECloudreve: Broken access control in file event stream leaks activity events for unshared siblings to single-file share recipients4.3 Mediumgovulncheck-vulndbopenSUSECloudreve: Server crash through image decompression/pixel bomb in thumbnail & avatar decoding (DoS)6.5 Mediumgovulncheck-vulndbopenSUSECloudreve: Inactive/banned account emails leaked via GET /api/v4/user/search because SearchActive() omits the active-status predicate4.3 Mediumgovulncheck-vulndbopenSUSECloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account4.3 Mediumgovulncheck-vulndbopenSUSETraefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass5.3 Mediumgovulncheck-vulndbopenSUSETraefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef5.3 Mediumgovulncheck-vulndbopenSUSETraefik before v2.11.52 Authentication Bypass via ReplacePathRegex7.8 Highgovulncheck-vulndbopenSUSEPublic-Only Personal access tokens scope bypass in Organization and Permission Endpoints4.9 Mediumgovulncheck-vulndbopenSUSESSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata7.5 Highgovulncheck-vulndbopenSUSEWebhook Authorization Header Returned in Plaintext via API2.7 Lowgovulncheck-vulndbopenSUSECross-Repo Information Disclosure via Org-Level Actions Run/Job APIs6.5 Mediumgovulncheck-vulndbopenSUSEGHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private4.3 Mediumgovulncheck-vulndbopenSUSEPublic-only API token restriction is not enforced on team API routes4.3 Mediumgovulncheck-vulndbopenSUSEPrivate org member list leaked via /members API endpoint — incomplete fix for PR #381457.5 Highgovulncheck-vulndbopenSUSETwo SSRF findings in Gitea 1.26.27.7 Highgovulncheck-vulndbopenSUSEParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests7.5 Highgovulncheck-vulndbopenSUSEGitea SSH Key Parser Denial of Service6.2 Mediumgovulncheck-vulndbopenSUSERepository Visibility Manipulation via Git Push Options7.1 Highgovulncheck-vulndbopenSUSEOAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009)8.1 Highgovulncheck-vulndbopenSUSEGitea LFS Deploy-Key Privilege Escalation5.4 Mediumgovulncheck-vulndbopenSUSELocal File Inclusion via file:// URI in Migration Restore4.4 Mediumgovulncheck-vulndbopenSUSENull Pointer Dereference in AddTime API Causes Authenticated Denial of Service2.7 Lowgovulncheck-vulndbopenSUSEOIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes9.1 Criticalgovulncheck-vulndbopenSUSEPrivate Repository Metadata Remains Accessible After Access Revocation7.5 Highgovulncheck-vulndbopenSUSEInternal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295)7.5 Highgovulncheck-vulndbopenSUSEREST API exposes organization membership of private organizations to public7.5 Highgovulncheck-vulndbopenSUSERSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)4.3 Mediumgovulncheck-vulndbopenSUSEFork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)7.1 Highgovulncheck-vulndbopenSUSEDenial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint6.5 Mediumgovulncheck-vulndbopenSUSECross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API2.7 Lowgovulncheck-vulndbopenSUSEPersonal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents4.3 Mediumgovulncheck-vulndbopenSUSEPublic-only repository tokens can update private PR head branches9.1 Criticalgovulncheck-vulndbopenSUSERepository migration SSRF via multi-answer DNS allow-list bypass6.5 Mediumgovulncheck-vulndbopenSUSESSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL6.3 Mediumgovulncheck-vulndbopenSUSECross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access7.5 Highgovulncheck-vulndbopenSUSEPrivilege Escalation via Access Token Scope Escalation in API9.8 Criticalgovulncheck-vulndbopenSUSEDenial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload6.2 Mediumgovulncheck-vulndbopenSUSEPrivate Repository Existence Disclosure via go-get Meta Endpoint5.3 Mediumgovulncheck-vulndbopenSUSECross-repository issue/comment attachment re-linking can expose private attachment content5.9 Mediumgovulncheck-vulndbopenSUSEBlind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim3.1 Lowgovulncheck-vulndbopenSUSEOAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)4.3 Mediumgovulncheck-vulndbopenSUSEUnbounded Arch package file metadata can cause resource amplification in Gitea package uploads4.3 Mediumgovulncheck-vulndbopenSUSEGitea Remember-Me Token Theft Not Invalidating Attacker Session9.1 Criticalgovulncheck-vulndbopenSUSEMissing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in c…5.9 Mediumgovulncheck-vulndbopenSUSERelease attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)6.5 Mediumgovulncheck-vulndbopenSUSEToken public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #371189.6 Critical- Show moreLoading…