attribute

Sep 24, 2025 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Mar 13, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Jan 22, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Dec 18, 2025 GO-2025-4261 +9 more

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Nov 22, 2025 GO-2025-4261 +9 more

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Nov 4, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Oct 29, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Sep 25, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Apr 28, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Oct 25, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Sep 11, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Aug 13, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Aug 4, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Changes in this version

+ const Diff

Jul 15, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Jun 20, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Jun 19, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Jun 10, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Changes in this version

+ const Filter

+ const GitlabLanguage

+ const LinguistDetectable

+ const LinguistDocumentation

+ const LinguistGenerated

+ const LinguistLanguage

+ const LinguistVendored

+ const Lockable

+ var LinguistAttributes = []string

+ func CheckAttributes(ctx context.Context, gitRepo *git.Repository, treeish string, ...) (map[string]*Attributes, error)

+ type Attribute string

+ func (a Attribute) IsUnspecified() bool

+ func (a Attribute) ToBool() optional.Option[bool]

+ func (a Attribute) ToString() optional.Option[string]

+ type Attributes struct

+ func NewAttributes() *Attributes

+ func (attrs *Attributes) Get(name string) Attribute

+ func (attrs *Attributes) GetDetectable() optional.Option[bool]

+ func (attrs *Attributes) GetDocumentation() optional.Option[bool]

+ func (attrs *Attributes) GetGenerated() optional.Option[bool]

+ func (attrs *Attributes) GetGitlabLanguage() optional.Option[string]

+ func (attrs *Attributes) GetLanguage() optional.Option[string]

+ func (attrs *Attributes) GetLinguistLanguage() optional.Option[string]

+ func (attrs *Attributes) GetVendored() optional.Option[bool]

+ type BatchChecker struct

+ func NewBatchChecker(repo *git.Repository, treeish string, attributes []string) (checker *BatchChecker, returnedErr error)

+ func (c *BatchChecker) CheckPath(path string) (rs *Attributes, err error)

+ func (c *BatchChecker) Close() error

+ type CheckAttributeOpts struct

+ Attributes []string

+ Filenames []string

Apr 29, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea