https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 12:14:49 +0000 https://db.gcve.eu/vuln/cve-2026-60021 <p><strong>Affected:</strong> Gitea</p> <p>Gitea&#39;s initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task&#39;s cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request continues after task cancellation and can exhaust the migration worker pool, preventing other migrations from progressing.</p> <p><strong>Affected:</strong> Gitea</p> <p>Gitea&#39;s initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task&#39;s cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request continues after task cancellation and can exhaust the migration worker pool, preventing other migrations from progressing.</p> https://db.gcve.eu/vuln/cve-2026-60021