https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 02 Nov 2026 07:16:32 +0000 https://db.gcve.eu/vuln/fkie_cve-2019-1010261 <p>Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically crafted URL. The fixed version is: 1.7.1 and later.</p> <p>Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically crafted URL. The fixed version is: 1.7.1 and later.</p> https://db.gcve.eu/vuln/fkie_cve-2019-1010261 https://db.gcve.eu/vuln/ghsa-5rh7-6gfj-mc87 <p><strong>Affected:</strong> Go: code.gitea.io/gitea</p> <p>Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically crafted URL. The fixed version is: 1.7.1 and later.</p> <p><strong>Affected:</strong> Go: code.gitea.io/gitea</p> <p>Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically crafted URL. The fixed version is: 1.7.1 and later.</p> https://db.gcve.eu/vuln/ghsa-5rh7-6gfj-mc87 https://db.gcve.eu/vuln/gsd-2019-1010261 gsd-2019-1010261 https://db.gcve.eu/vuln/gsd-2019-1010261 https://db.gcve.eu/vuln/ubuntu-cve-2019-1010261 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-code.gitea-git, Ubuntu:20.04:LTS: golang-code.gitea-git, Ubuntu:22.04:LTS: golang-code.gitea-git</p> <p>Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically crafted URL. The fixed version is: 1.7.1 and later.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-code.gitea-git, Ubuntu:20.04:LTS: golang-code.gitea-git, Ubuntu:22.04:LTS: golang-code.gitea-git</p> <p>Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically crafted URL. The fixed version is: 1.7.1 and later.</p> https://db.gcve.eu/vuln/ubuntu-cve-2019-1010261