zstd

Apr 7, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Apr 24, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Apr 18, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Apr 8, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Sep 24, 2025 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Mar 13, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Jan 22, 2026 GO-2025-4261

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

Dec 18, 2025 GO-2025-4261 +9 more

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Nov 22, 2025 GO-2025-4261 +9 more

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Nov 4, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Oct 29, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Sep 25, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Apr 28, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Oct 25, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Sep 11, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Aug 13, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Aug 4, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Jul 15, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Jun 20, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Jun 19, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Jun 10, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Apr 29, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Dec 16, 2024 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

May 12, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Apr 7, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Mar 24, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Mar 4, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Feb 19, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Feb 6, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Feb 5, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Jan 10, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Jan 9, 2025 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea

Changes in this version

+ var IgnoreChecksum = zstd.IgnoreChecksum

+ var WithAllLitEntropyCompression = zstd.WithAllLitEntropyCompression

+ var WithDecodeAllCapLimit = zstd.WithDecodeAllCapLimit

+ var WithDecodeBuffersBelow = zstd.WithDecodeBuffersBelow

+ var WithDecoderConcurrency = zstd.WithDecoderConcurrency

+ var WithDecoderDictRaw = zstd.WithDecoderDictRaw

+ var WithDecoderDicts = zstd.WithDecoderDicts

+ var WithDecoderLowmem = zstd.WithDecoderLowmem

+ var WithDecoderMaxMemory = zstd.WithDecoderMaxMemory

+ var WithDecoderMaxWindow = zstd.WithDecoderMaxWindow

+ var WithEncoderCRC = zstd.WithEncoderCRC

+ var WithEncoderConcurrency = zstd.WithEncoderConcurrency

+ var WithEncoderDict = zstd.WithEncoderDict

+ var WithEncoderDictRaw = zstd.WithEncoderDictRaw

+ var WithEncoderLevel = zstd.WithEncoderLevel

+ var WithEncoderPadding = zstd.WithEncoderPadding

+ var WithLowerEncoderMem = zstd.WithLowerEncoderMem

+ var WithNoEntropyCompression = zstd.WithNoEntropyCompression

+ var WithSingleSegment = zstd.WithSingleSegment

+ var WithWindowSize = zstd.WithWindowSize

+ var WithZeroFrames = zstd.WithZeroFrames

+ type EncoderLevel = zstd.EncoderLevel

+ const SpeedBestCompression

+ const SpeedBetterCompression

+ const SpeedDefault

+ const SpeedFastest

+ type Reader zstd.Decoder

+ func NewReader(r io.Reader, opts ...ReaderOption) (*Reader, error)

+ func (r *Reader) Close() error

+ func (r *Reader) Read(p []byte) (int, error)

+ type ReaderOption = zstd.DOption

+ type SeekableReader struct

+ func NewSeekableReader(r io.ReadSeeker, opts ...ReaderOption) (*SeekableReader, error)

+ func (r *SeekableReader) Close() error

+ func (r *SeekableReader) Read(p []byte) (int, error)

+ func (r *SeekableReader) Seek(offset int64, whence int) (int64, error)

+ type SeekableWriter struct

+ func NewSeekableWriter(w io.Writer, blockSize int, opts ...WriterOption) (*SeekableWriter, error)

+ func (w *SeekableWriter) Close() error

+ func (w *SeekableWriter) Write(p []byte) (int, error)

+ type Writer zstd.Encoder

+ func NewWriter(w io.Writer, opts ...WriterOption) (*Writer, error)

+ func (w *Writer) Close() error

+ func (w *Writer) Write(p []byte) (int, error)

+ type WriterOption = zstd.EOption

Dec 17, 2024 GO-2025-4258 +11 more

  GO-2025-4258: Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

  GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

  GO-2026-4274: Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists in code.gitea.io/gitea

  GO-2026-4362: Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

  GO-2026-4363: Gitea does not properly validate repository ownership when deleting Git LFS locks in code.gitea.io/gitea

  GO-2026-4364: Gitea does not properly validate repository ownership when linking attachments to releases in code.gitea.io/gitea

  GO-2026-4365: Gitea may send release notification emails for private repositories to users whose access has been revoked in code.gitea.io/gitea

  GO-2026-4366: Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface in code.gitea.io/gitea

  GO-2026-4367: Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

  GO-2026-4368: Gitea improperly exposes issue titles and repository names through previously started stopwatches in code.gitea.io/gitea

  GO-2026-4369: Gitea does not properly validate ownership when toggling OpenID URI visibility in code.gitea.io/gitea

  GO-2026-4370: Gitea does not properly validate project ownership in organization project operations in code.gitea.io/gitea