{"schemaVersion":3,"id":"CVE-2026-105964","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limit. A user who can run a workflow and obtains the runner token of that run could send an oversized request to the artifact service and exhaust the memory of the server, which terminates the Gitea process. The request body is now limited to 1 MiB.","dates":{"published":"2026-10-18T18:56:47.881Z","modified":"2026-10-19T20:15:15.234Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00305,"percentile":0.21893,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-19T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00305,"percentile":0.21893}],"last30":[{"date":"2026-10-19T00:00:00.000Z","score":0.00156,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00305,"percentile":0.21893}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"}],"affected":[{"vendor":"gitea","product":"gitea","name":"Gitea","label":"gitea","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.22.0, ≤ 28.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.22.0, ≤ 28.1.0","eol":null,"hubHref":"/vendor/gitea/gitea"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-6f9g-7jgm-m5ph","label":"github.com/go-gitea/gitea/security/advisories/GHSA-6f9g-7jgm-m5ph","hostname":"github.com","tags":["Vendor Advisory"]},{"url":"https://github.com/go-gitea/gitea/pull/39818","label":"github.com/go-gitea/gitea/pull/39818","hostname":"github.com","tags":["Patch"]},{"url":"https://github.com/go-gitea/gitea/pull/39822","label":"github.com/go-gitea/gitea/pull/39822","hostname":"github.com","tags":["Patch"]},{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"blog.gitea.com/release-of-28.2.0/","hostname":"blog.gitea.com","tags":["Release Notes"]},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"github.com/go-gitea/gitea/releases/tag/v28.2.0","hostname":"github.com","tags":["Release Notes"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-18T18:56:47.881Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-19T20:15:15.234Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T16:25:09.699Z","stale":false,"partial":false}}