Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-20904
6.5
MEDIUMCVSS v3
Published
January 22, 2026
Affected
7 projects
Assigned by
88ee5874-cf24-4952-aea0-31affedb7ff2
Severity scale
010
Description
Gitea does not properly validate ownership when toggling OpenID URI visibility. An authenticated user may be able to change the visibility settings of other users' OpenID identities.
go-gitea/gitea
GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD< 1.25.4NVD
Docker Hub
Chocolatey
Crates.io
NPM
