CVE-2026-58421

Summary

Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service

Affected Software

Weaknesses

• CWE-284: CWE-284

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://github.com/go-gitea/gitea/security/advisories/GHSA-v96j-25gv-g2w9

References

• https://github.com/go-gitea/gitea/security/advisories/GHSA-v96j-25gv-g2w9
• https://github.com/go-gitea/gitea/pull/38011
• https://github.com/go-gitea/gitea/releases/tag/v1.26.4
• https://blog.gitea.com/release-of-1.26.3-and-1.26.4/

• ←Previous
• Next→