{"id":"EUVD-2026-41631","enisaUuid":"f8072442-b5ff-3f22-ab50-e5c67c931673","description":"Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expensive searches to consume server resources.","datePublished":"Jul 3, 2026, 8:19:35 PM","dateUpdated":"Jul 9, 2026, 2:43:25 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/go-gitea/gitea/pull/36809\nhttps://github.com/go-gitea/gitea/pull/36835\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\nhttps://blog.gitea.com/release-of-1.25.5/\n","aliases":"CVE-2026-26307\nGHSA-h9c5-x7g8-4q7f\n","assigner":"Gitea","epss":0.63,"enisaIdProduct":[{"id":"56cce2ec-de0e-3fa0-9c29-910ea207b6ac","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.25.5"}],"enisaIdVendor":[{"id":"1c3c1a79-5f12-368b-a805-a650e11afa5e","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"f50ef9e5-7c07-320e-8237-b96ace4c9574","vulnerability":{"id":"GHSA-h9c5-x7g8-4q7f","description":"Gitea git grep searches allow server resource exhaustion","datePublished":"Jul 3, 2026, 9:31:37 PM","dateUpdated":"Sep 1, 2026, 5:21:28 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-26307\nhttps://github.com/go-gitea/gitea/pull/36809\nhttps://github.com/go-gitea/gitea/pull/36835\nhttps://github.com/go-gitea/gitea/commit/5d87bb3d4566e71b791a8114bfc9e25c037ab5fe\nhttps://github.com/go-gitea/gitea/commit/f7e3569fab57d3525280670dffcc30c84c87b115\nhttps://blog.gitea.com/release-of-1.25.5\nhttps://github.com/go-gitea/gitea\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\n","enisa_id":"EUVD-2026-41631\n","aliases":"GHSA-h9c5-x7g8-4q7f\nCVE-2026-26307\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"fcf8c76d-4335-3bd8-a2f7-37e18b43c28c","vulnerability":{"id":"CVE-2026-26307","description":"Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expensive searches to consume server resources.","datePublished":"Jul 3, 2026, 8:19:35 PM","dateUpdated":"Jul 9, 2026, 2:43:25 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/go-gitea/gitea/pull/36809\nhttps://github.com/go-gitea/gitea/pull/36835\nhttps://github.com/go-gitea/gitea/releases/tag/v1.25.5\nhttps://blog.gitea.com/release-of-1.25.5/\n","enisa_id":"EUVD-2026-41631\n","assigner":"Gitea","epss":0.63,"dataProcessed":"Oct 29, 2026, 7:19:33 AM","vulnerabilityProduct":[{"id":"4c992adc-5c32-38b3-a416-f72a3ab833f1","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.25.5"}],"vulnerabilityVendor":[{"id":"8b12e4e3-5fbe-3fe1-9060-275ed16bfd6d","vendor":{"name":"Gitea"}}]}}],"enisaIdAdvisory":[]}