https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 13:27:56 +0000 https://db.gcve.eu/vuln/cve-2026-73814 <p><strong>Affected:</strong> Gitea</p> <p>Gitea&#39;s collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The collaborator can promote their effective permissions from Admin to Owner and then perform owner-only operations, including transferring the repository to their own account. This bypasses the intended boundary between repository administration and ownership.</p> <p><strong>Affected:</strong> Gitea</p> <p>Gitea&#39;s collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The collaborator can promote their effective permissions from Admin to Owner and then perform owner-only operations, including transferring the repository to their own account. This bypasses the intended boundary between repository administration and ownership.</p> https://db.gcve.eu/vuln/cve-2026-73814