Security

affects: ≥18.0 <18.4

affects: <14.23; ≥15.0 <15.18; ≥16.0 <16.14; ≥17.0 <17.10; ≥18.0 <18.4

affects: <2026.5.3

affects: <2026.6.0

A vulnerability in Gitea allows attackers to redirect users to external websites after login by using special characters in the redirect_to parameter, which can lead to phishing attacks.

A security vulnerability in Gitea allows read-only organization members to create repositories via API despite lacking permission, enabling them to steal all organization CI/CD secrets through malicious workflow files.

Gitea's 3D file viewer has a security vulnerability that allows attackers to inject malicious JavaScript code through crafted .gltf files, which then executes for any user who views the file.

A vulnerability in Gitea allows attackers with 'public-only' API tokens to access and modify private user data, even though these tokens should only be able to retrieve public information.

A SQL injection vulnerability in Koha library software allows authenticated staff users with reports access to read arbitrary data from the application database, including password hashes and personal information.

A vulnerability in the Grafana Operator allows malicious users to steal the Kubernetes service account token of the operator and gain elevated privileges by creating specially crafted Dashboard resources.

affects: <5.24.0

A security vulnerability in MariaDB database software allows privileged users to execute commands on the server through certain system variables. This can lead to complete compromise of the database system.

affects: ≥10.6.1 <10.6.27; ≥10.11.1 <10.11.18; ≥11.4.1 <11.4.12; ≥11.8.1 <11.8.8; =12.3.1

A vulnerability in MariaDB database servers allows malicious nodes to execute arbitrary system commands on other servers when joining a database cluster.

affects: ≥10.6.1 <10.6.27; ≥10.11.1 <10.11.18; ≥11.4.1 <11.4.12; ≥11.8.1 <11.8.8; =12.3.1

MariaDB database server in certain versions failed to properly check file permissions, allowing users without appropriate rights to export data to files. This enables unauthorized access to sensitive database contents.

affects: ≥10.6.1 <10.6.26; ≥10.11.1 <10.11.17; ≥11.4.1 <11.4.11; ≥11.8.1 <11.8.7; =12.3.1

A vulnerability in MariaDB versions 3.3.18 and 3.4.8 allows SQL injection attacks despite using the mysql_real_escape_string() security function when using big5 character encoding.

affects: =3.3.18; =3.4.8

A vulnerability in MariaDB's mbstream backup tool allows attackers to create files outside the intended target directory through specially crafted archives, potentially leading to unauthorized file access.

affects: ≥10.6.1 <10.6.26; ≥10.11.1 <10.11.17; ≥11.4.1 <11.4.11; ≥11.8.1 <11.8.7; =12.3.1

A vulnerability in MariaDB on Windows systems allows users to execute system commands when the CONNECT engine with REST support is enabled, due to unsafe processing of HTTP attributes.

affects: ≥10.6.1 <10.6.26; ≥10.11.1 <10.11.17; ≥11.4.1 <11.4.11; ≥11.8.1 <11.8.7; =12.3.1