CVE Vulnerability Catalog

Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository despite RepoAdminChangeTeamAccess being disabled. The endpoint does not enforce the organization's restriction on repository administrators changing team access.

Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS class attribute while disabling sanitization and rendering directly in the main document without an iframe sandbox. A malicious repository notebook can supply multiple CSS classes that create a viewport-covering overlay and intercept clicks when another user views it. The reported impact is UI redress; script execution was not demonstrated.

Gitea's Org-mode markup renderer processes INCLUDE directives without preventing access to server-side files, allowing an unauthenticated attacker to read files accessible to the Gitea service account and potentially execute commands via Git hook modification.

Gitea's starred-repository and tracked-time API endpoints do not re-check current repository permissions before returning data associated with the requesting user. A user whose access to a private repository has been revoked can still retrieve repository metadata through /api/v1/user/starred and private issue titles through /api/v1/user/times.

Vulnerability in util-linux versions 2.17 through 2.41.6, 2.42 through 2.42.3, and 2.42.4 when the legacy mount(2) path is used without /proc. Restricted non-root mount requests validate an /etc/fstab target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab user or users entry can use renameat2(RENAME_EXCHANGE) to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over /etc/sudoers.d, thereby gaining root privileges.

Vulnerability in util-linux versions 2.39 through 2.41.4 and 2.42 through 2.42.1. The SUID mount utility's hook_owner.c post-mount hook performs path-based chmod() and lchown() operations on a previously validated mount target. A local low-privileged user authorized by an /etc/fstab entry with user or users and an X-mount.mode, X-mount.owner, or X-mount.group option can use renameat2(RENAME_EXCHANGE) to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges.

When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requests without validating the destination against internal network addresses. An unauthenticated remote attacker can cause the server to contact loopback or private-network HTTP services.

Vulnerability in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable. Alternatively, the same result could be achieved when the $request_filename variable is used in an access log format directive. An unauthenticated attacker can send crafted HTTP requests, causing a heap buffer overflow in the NGINX worker process, leading to restart or potential code execution.

The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() allowing attackers to execute commands by supplying shell metacharacters in file paths, with Python process privileges.

Stills before 25.24.2 contains an OS command injection vulnerability allowing attackers to execute shell commands by supplying crafted media file paths, with Node.js process privileges.

Vulnerability in @offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying font files with crafted names. Font paths are interpolated unquoted into a FontForge command run through child_process.execSync, so shell metacharacters in file names execute commands with the Node.js process privileges.

Turnpress through 0.4.2 contains an OS command injection vulnerability. The convertDocxToHtml function in src/converter.ts invokes pandoc through execa with shell:true, allowing shell metacharacters in the --docx path to execute commands with the victim's privileges.

Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows. Attackers can supply cmd.exe metacharacters such as & in the setUrl() value, which executeOnWindows() passes unescaped to PHP exec().

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability allowing attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines, with Node.js process privileges.

nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() allowing attackers to execute commands by supplying crafted audio file paths, with Node.js process privileges.

transcribe2texts through 1.0.6 contains an OS command injection vulnerability. Attackers can supply crafted audioPath values to transcribeAudio(), injecting $() or backtick substitution into the unescaped path passed to child_process.exec(), executing commands with Node.js process privileges.

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer(). Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS commands as the invoking user when the pisa tool is used with -s/--start-viewer.

@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability. Attackers can supply crafted archive file names to compress_file, injecting $() substitutions or unquoted shell metacharacters into shelljs exec() calls.

Whisper-node through 1.1.1 contains an OS command injection vulnerability. Attackers can supply crafted filePath or whisperOptions.language values to whisper(), injecting shell metacharacters or $() substitution into the command string built by createCppCommand() and run via shelljs exec(), executing commands with Node.js process privileges.

@mborne/extract before 0.2.1 contains an OS command injection vulnerability. Attackers can supply shell metacharacters in archivePath or targetDir options passed to extract(), injecting commands into unquoted shelljs exec() strings in the unzip, 7z, tar-bz2 and gz extractors, running them with Node.js process privileges.