[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-20909":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":848,"aliases":849,"duplicate_of":9,"upstream":852,"downstream":853,"duplicates":856,"related":857,"reserved_at":9,"published_at":859,"modified_at":860,"state":861,"summary":862,"references_raw":871,"kevs":919,"epss":920,"epss_history":923,"metrics":1153,"affected":1163},"CVE-2026-20909","Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","weakness","Incomplete","Pillar",[19,106,110,160,173,177,181,185,189,232,271,381,398,501,521,525,685],{"id":20,"name":21,"techniques":22},"CAPEC-19","Embedding Scripts within Scripts",[23,34,99],{"id":24,"name":25,"tactics":26,"countermeasures":33},"T1027.009","Embedded Payloads",[27,30],{"id":28,"name":29},"TA0030","Defense Evasion",{"id":31,"name":32},"TA0005","Stealth",[],{"id":35,"name":36,"tactics":37,"countermeasures":44},"T1546.004","Unix Shell Configuration Modification",[38,41],{"id":39,"name":40},"TA0111","Privilege Escalation",{"id":42,"name":43},"TA0110","Persistence",[45,50,55,59,64,69,73,78,82,86,90,94],{"id":46,"name":47,"tactic":48},"D3-FA","File Analysis",{"name":49},"Detect",{"id":51,"name":52,"tactic":53},"D3-RFAM","Remote File Access Mediation",{"name":54},"Isolate",{"id":56,"name":57,"tactic":58},"D3-CQ","Content Quarantine",{"name":54},{"id":60,"name":61,"tactic":62},"D3-DF","Decoy File",{"name":63},"Deceive",{"id":65,"name":66,"tactic":67},"D3-FE","File Encryption",{"name":68},"Harden",{"id":70,"name":71,"tactic":72},"D3-FIM","File Integrity Monitoring",{"name":49},{"id":74,"name":75,"tactic":76},"D3-FEV","File Eviction",{"name":77},"Evict",{"id":79,"name":80,"tactic":81},"D3-CM","Content Modification",{"name":54},{"id":83,"name":84,"tactic":85},"D3-USICA","User Session Init Config Analysis",{"name":49},{"id":87,"name":88,"tactic":89},"D3-CF","Content Filtering",{"name":54},{"id":91,"name":92,"tactic":93},"D3-LFP","Local File Permissions",{"name":54},{"id":95,"name":96,"tactic":97},"D3-RF","Restore File",{"name":98},"Restore",{"id":100,"name":101,"tactics":102,"countermeasures":105},"T1546.016","Installer Packages",[103,104],{"id":39,"name":40},{"id":42,"name":43},[],{"id":107,"name":108,"techniques":109},"CAPEC-441","Malicious Logic Insertion",[],{"id":111,"name":112,"techniques":113},"CAPEC-478","Modification of Windows Service Configuration",[114,141],{"id":115,"name":116,"tactics":117,"countermeasures":125},"T1574.011","Services Registry Permissions Weakness",[118,119,120,121,122],{"id":42,"name":43},{"id":39,"name":40},{"id":28,"name":29},{"id":31,"name":32},{"id":123,"name":124},"TA0104","Execution",[126,130,132,136],{"id":127,"name":128,"tactic":129},"D3-SICA","System Init Config Analysis",{"name":49},{"id":56,"name":57,"tactic":131},{"name":54},{"id":133,"name":134,"tactic":135},"D3-RC","Restore Configuration",{"name":98},{"id":137,"name":138,"tactic":139},"D3-CI","Configuration Inventory",{"name":140},"Model",{"id":142,"name":143,"tactics":144,"countermeasures":147},"T1543.003","Windows Service",[145,146],{"id":42,"name":43},{"id":39,"name":40},[148,152,156],{"id":149,"name":150,"tactic":151},"D3-DI","Data Inventory",{"name":140},{"id":153,"name":154,"tactic":155},"D3-SCP","System Configuration Permissions",{"name":68},{"id":157,"name":158,"tactic":159},"D3-RD","Restore Database",{"name":98},{"id":161,"name":162,"techniques":163},"CAPEC-479","Malicious Root Certificate",[164],{"id":165,"name":166,"tactics":167,"countermeasures":172},"T1553.004","Install Root Certificate",[168,169],{"id":28,"name":29},{"id":170,"name":171},"TA0112","Defense Impairment",[],{"id":174,"name":175,"techniques":176},"CAPEC-502","Intent Spoof",[],{"id":178,"name":179,"techniques":180},"CAPEC-503","WebView Exposure",[],{"id":182,"name":183,"techniques":184},"CAPEC-536","Data Injected During Configuration",[],{"id":186,"name":187,"techniques":188},"CAPEC-546","Incomplete Data Deletion in a Multi-Tenant Environment",[],{"id":190,"name":191,"techniques":192},"CAPEC-550","Install New Service",[193],{"id":194,"name":195,"tactics":196,"countermeasures":199},"T1543","Create or Modify System Process",[197,198],{"id":42,"name":43},{"id":39,"name":40},[200,202,204,206,208,210,212,214,216,218,222,224,226,228,230],{"id":87,"name":88,"tactic":201},{"name":54},{"id":74,"name":75,"tactic":203},{"name":77},{"id":46,"name":47,"tactic":205},{"name":49},{"id":70,"name":71,"tactic":207},{"name":49},{"id":95,"name":96,"tactic":209},{"name":98},{"id":91,"name":92,"tactic":211},{"name":54},{"id":51,"name":52,"tactic":213},{"name":54},{"id":56,"name":57,"tactic":215},{"name":54},{"id":79,"name":80,"tactic":217},{"name":54},{"id":219,"name":220,"tactic":221},"D3-SFA","System File Analysis",{"name":49},{"id":149,"name":150,"tactic":223},{"name":140},{"id":60,"name":61,"tactic":225},{"name":63},{"id":65,"name":66,"tactic":227},{"name":68},{"id":157,"name":158,"tactic":229},{"name":98},{"id":153,"name":154,"tactic":231},{"name":68},{"id":233,"name":234,"techniques":235},"CAPEC-551","Modify Existing Service",[236],{"id":194,"name":195,"tactics":237,"countermeasures":240},[238,239],{"id":42,"name":43},{"id":39,"name":40},[241,243,245,247,249,251,253,255,257,259,261,263,265,267,269],{"id":87,"name":88,"tactic":242},{"name":54},{"id":74,"name":75,"tactic":244},{"name":77},{"id":46,"name":47,"tactic":246},{"name":49},{"id":70,"name":71,"tactic":248},{"name":49},{"id":95,"name":96,"tactic":250},{"name":98},{"id":91,"name":92,"tactic":252},{"name":54},{"id":51,"name":52,"tactic":254},{"name":54},{"id":56,"name":57,"tactic":256},{"name":54},{"id":79,"name":80,"tactic":258},{"name":54},{"id":219,"name":220,"tactic":260},{"name":49},{"id":149,"name":150,"tactic":262},{"name":140},{"id":60,"name":61,"tactic":264},{"name":63},{"id":65,"name":66,"tactic":266},{"name":68},{"id":157,"name":158,"tactic":268},{"name":98},{"id":153,"name":154,"tactic":270},{"name":68},{"id":272,"name":273,"techniques":274},"CAPEC-552","Install Rootkit ",[275,332,352],{"id":276,"name":277,"tactics":278,"countermeasures":281},"T1014","Rootkit",[279,280],{"id":28,"name":29},{"id":31,"name":32},[282,286,290,292,296,298,300,302,304,306,308,310,314,318,320,324,328,330],{"id":283,"name":284,"tactic":285},"D3-AVE","Asset Vulnerability Enumeration",{"name":140},{"id":287,"name":288,"tactic":289},"D3-SWI","Software Inventory",{"name":140},{"id":79,"name":80,"tactic":291},{"name":54},{"id":293,"name":294,"tactic":295},"D3-SU","Software Update",{"name":68},{"id":87,"name":88,"tactic":297},{"name":54},{"id":91,"name":92,"tactic":299},{"name":54},{"id":95,"name":96,"tactic":301},{"name":98},{"id":51,"name":52,"tactic":303},{"name":54},{"id":46,"name":47,"tactic":305},{"name":49},{"id":70,"name":71,"tactic":307},{"name":49},{"id":60,"name":61,"tactic":309},{"name":63},{"id":311,"name":312,"tactic":313},"D3-RS","Restore Software",{"name":98},{"id":315,"name":316,"tactic":317},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":49},{"id":65,"name":66,"tactic":319},{"name":68},{"id":321,"name":322,"tactic":323},"D3-FV","Firmware Verification",{"name":49},{"id":325,"name":326,"tactic":327},"D3-FBA","Firmware Behavior Analysis",{"name":49},{"id":74,"name":75,"tactic":329},{"name":77},{"id":56,"name":57,"tactic":331},{"name":54},{"id":333,"name":334,"tactics":335,"countermeasures":339},"T1542.003","Bootkit",[336,337,338],{"id":28,"name":29},{"id":31,"name":32},{"id":42,"name":43},[340,344,346,348,350],{"id":341,"name":342,"tactic":343},"D3-BA","Bootloader Authentication",{"name":68},{"id":283,"name":284,"tactic":345},{"name":140},{"id":293,"name":294,"tactic":347},{"name":68},{"id":311,"name":312,"tactic":349},{"name":98},{"id":287,"name":288,"tactic":351},{"name":140},{"id":353,"name":354,"tactics":355,"countermeasures":358},"T1547.006","Kernel Modules and Extensions",[356,357],{"id":42,"name":43},{"id":39,"name":40},[359,361,363,365,367,369,371,373,375,377,379],{"id":65,"name":66,"tactic":360},{"name":68},{"id":70,"name":71,"tactic":362},{"name":49},{"id":60,"name":61,"tactic":364},{"name":63},{"id":74,"name":75,"tactic":366},{"name":77},{"id":87,"name":88,"tactic":368},{"name":54},{"id":91,"name":92,"tactic":370},{"name":54},{"id":51,"name":52,"tactic":372},{"name":54},{"id":56,"name":57,"tactic":374},{"name":54},{"id":79,"name":80,"tactic":376},{"name":54},{"id":95,"name":96,"tactic":378},{"name":98},{"id":46,"name":47,"tactic":380},{"name":49},{"id":382,"name":383,"techniques":384},"CAPEC-556","Replace File Extension Handlers",[385],{"id":386,"name":387,"tactics":388,"countermeasures":391},"T1546.001","Change Default File Association",[389,390],{"id":39,"name":40},{"id":42,"name":43},[392,394,396],{"id":56,"name":57,"tactic":393},{"name":54},{"id":133,"name":134,"tactic":395},{"name":98},{"id":137,"name":138,"tactic":397},{"name":140},{"id":399,"name":400,"techniques":401},"CAPEC-558","Replace Trusted Executable",[402,408],{"id":403,"name":404,"tactics":405,"countermeasures":407},"T1505.005","Terminal Services DLL",[406],{"id":42,"name":43},[],{"id":409,"name":410,"tactics":411,"countermeasures":414},"T1546.008","Accessibility Features",[412,413],{"id":39,"name":40},{"id":42,"name":43},[415,417,421,425,427,431,433,437,439,443,447,449,453,455,459,461,465,469,471,473,475,477,479,483,487,489,493,497],{"id":74,"name":75,"tactic":416},{"name":77},{"id":418,"name":419,"tactic":420},"D3-APCA","Application Protocol Command Analysis",{"name":49},{"id":422,"name":423,"tactic":424},"D3-NTCD","Network Traffic Community Deviation",{"name":49},{"id":60,"name":61,"tactic":426},{"name":63},{"id":428,"name":429,"tactic":430},"D3-RTSD","Remote Terminal Session Detection",{"name":49},{"id":65,"name":66,"tactic":432},{"name":68},{"id":434,"name":435,"tactic":436},"D3-CAA","Connection Attempt Analysis",{"name":49},{"id":46,"name":47,"tactic":438},{"name":49},{"id":440,"name":441,"tactic":442},"D3-CSPP","Client-server Payload Profiling",{"name":49},{"id":444,"name":445,"tactic":446},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":49},{"id":70,"name":71,"tactic":448},{"name":49},{"id":450,"name":451,"tactic":452},"D3-DA","Dynamic Analysis",{"name":49},{"id":95,"name":96,"tactic":454},{"name":98},{"id":456,"name":457,"tactic":458},"D3-EFA","Emulated File Analysis",{"name":49},{"id":133,"name":134,"tactic":460},{"name":98},{"id":462,"name":463,"tactic":464},"D3-NTSA","Network Traffic Signature Analysis",{"name":49},{"id":466,"name":467,"tactic":468},"D3-ANAA","Administrative Network Activity Analysis",{"name":49},{"id":87,"name":88,"tactic":470},{"name":54},{"id":91,"name":92,"tactic":472},{"name":54},{"id":51,"name":52,"tactic":474},{"name":54},{"id":56,"name":57,"tactic":476},{"name":54},{"id":79,"name":80,"tactic":478},{"name":54},{"id":480,"name":481,"tactic":482},"D3-EAL","Executable Allowlisting",{"name":54},{"id":484,"name":485,"tactic":486},"D3-EDL","Executable Denylisting",{"name":54},{"id":137,"name":138,"tactic":488},{"name":140},{"id":490,"name":491,"tactic":492},"D3-NTF","Network Traffic Filtering",{"name":54},{"id":494,"name":495,"tactic":496},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":49},{"id":498,"name":499,"tactic":500},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":49},{"id":502,"name":503,"techniques":504},"CAPEC-562","Modify Shared File",[505],{"id":506,"name":507,"tactics":508,"countermeasures":512},"T1080","Taint Shared Content",[509],{"id":510,"name":511},"TA0109","Lateral Movement",[513,517],{"id":514,"name":515,"tactic":516},"D3-NRAM","Network Resource Access Mediation",{"name":54},{"id":518,"name":519,"tactic":520},"D3-DNR","Decoy Network Resource",{"name":63},{"id":522,"name":523,"techniques":524},"CAPEC-563","Add Malicious File to Shared Webroot",[],{"id":526,"name":527,"techniques":528},"CAPEC-564","Run Software at Logon",[529,576,605,634],{"id":530,"name":531,"tactics":532,"countermeasures":535},"T1037","Boot or Logon Initialization Scripts",[533,534],{"id":42,"name":43},{"id":39,"name":40},[536,538,540,542,544,546,548,550,552,554,556,558,560,562,564,566,568,570,572,574],{"id":87,"name":88,"tactic":537},{"name":54},{"id":137,"name":138,"tactic":539},{"name":140},{"id":65,"name":66,"tactic":541},{"name":68},{"id":95,"name":96,"tactic":543},{"name":98},{"id":133,"name":134,"tactic":545},{"name":98},{"id":91,"name":92,"tactic":547},{"name":54},{"id":51,"name":52,"tactic":549},{"name":54},{"id":56,"name":57,"tactic":551},{"name":54},{"id":79,"name":80,"tactic":553},{"name":54},{"id":480,"name":481,"tactic":555},{"name":54},{"id":484,"name":485,"tactic":557},{"name":54},{"id":74,"name":75,"tactic":559},{"name":77},{"id":46,"name":47,"tactic":561},{"name":49},{"id":70,"name":71,"tactic":563},{"name":49},{"id":450,"name":451,"tactic":565},{"name":49},{"id":456,"name":457,"tactic":567},{"name":49},{"id":518,"name":519,"tactic":569},{"name":63},{"id":514,"name":515,"tactic":571},{"name":54},{"id":127,"name":128,"tactic":573},{"name":49},{"id":60,"name":61,"tactic":575},{"name":63},{"id":577,"name":578,"tactics":579,"countermeasures":582},"T1543.001","Launch Agent",[580,581],{"id":42,"name":43},{"id":39,"name":40},[583,585,587,589,591,593,595,597,599,601,603],{"id":87,"name":88,"tactic":584},{"name":54},{"id":51,"name":52,"tactic":586},{"name":54},{"id":70,"name":71,"tactic":588},{"name":49},{"id":65,"name":66,"tactic":590},{"name":68},{"id":79,"name":80,"tactic":592},{"name":54},{"id":95,"name":96,"tactic":594},{"name":98},{"id":91,"name":92,"tactic":596},{"name":54},{"id":56,"name":57,"tactic":598},{"name":54},{"id":60,"name":61,"tactic":600},{"name":63},{"id":46,"name":47,"tactic":602},{"name":49},{"id":74,"name":75,"tactic":604},{"name":77},{"id":606,"name":607,"tactics":608,"countermeasures":611},"T1543.004","Launch Daemon",[609,610],{"id":42,"name":43},{"id":39,"name":40},[612,614,616,618,620,622,624,626,628,630,632],{"id":56,"name":57,"tactic":613},{"name":54},{"id":79,"name":80,"tactic":615},{"name":54},{"id":60,"name":61,"tactic":617},{"name":63},{"id":46,"name":47,"tactic":619},{"name":49},{"id":70,"name":71,"tactic":621},{"name":49},{"id":74,"name":75,"tactic":623},{"name":77},{"id":95,"name":96,"tactic":625},{"name":98},{"id":87,"name":88,"tactic":627},{"name":54},{"id":91,"name":92,"tactic":629},{"name":54},{"id":51,"name":52,"tactic":631},{"name":54},{"id":65,"name":66,"tactic":633},{"name":68},{"id":635,"name":636,"tactics":637,"countermeasures":640},"T1547","Boot or Logon Autostart Execution",[638,639],{"id":42,"name":43},{"id":39,"name":40},[641,643,645,647,649,651,653,655,657,659,661,663,665,667,669,671,673,675,677,679,681,683],{"id":51,"name":52,"tactic":642},{"name":54},{"id":65,"name":66,"tactic":644},{"name":68},{"id":46,"name":47,"tactic":646},{"name":49},{"id":70,"name":71,"tactic":648},{"name":49},{"id":293,"name":294,"tactic":650},{"name":68},{"id":127,"name":128,"tactic":652},{"name":49},{"id":137,"name":138,"tactic":654},{"name":140},{"id":287,"name":288,"tactic":656},{"name":140},{"id":95,"name":96,"tactic":658},{"name":98},{"id":283,"name":284,"tactic":660},{"name":140},{"id":133,"name":134,"tactic":662},{"name":98},{"id":311,"name":312,"tactic":664},{"name":98},{"id":450,"name":451,"tactic":666},{"name":49},{"id":456,"name":457,"tactic":668},{"name":49},{"id":87,"name":88,"tactic":670},{"name":54},{"id":91,"name":92,"tactic":672},{"name":54},{"id":56,"name":57,"tactic":674},{"name":54},{"id":79,"name":80,"tactic":676},{"name":54},{"id":74,"name":75,"tactic":678},{"name":77},{"id":480,"name":481,"tactic":680},{"name":54},{"id":484,"name":485,"tactic":682},{"name":54},{"id":60,"name":61,"tactic":684},{"name":63},{"id":686,"name":687,"techniques":688},"CAPEC-578","Disable Security Software",[689,748,781,800,811,822,833],{"id":690,"name":691,"tactics":692,"countermeasures":699},"T1556.006","Multi-Factor Authentication",[693,694,695,696],{"id":28,"name":29},{"id":170,"name":171},{"id":42,"name":43},{"id":697,"name":698},"TA0031","Credential Access",[700,704,708,712,716,720,724,728,732,736,740,744],{"id":701,"name":702,"tactic":703},"D3-ABPI","Application-based Process Isolation",{"name":54},{"id":705,"name":706,"tactic":707},"D3-PS","Process Suspension",{"name":77},{"id":709,"name":710,"tactic":711},"D3-HBPI","Hardware-based Process Isolation",{"name":54},{"id":713,"name":714,"tactic":715},"D3-WSAM","Web Session Access Mediation",{"name":54},{"id":717,"name":718,"tactic":719},"D3-PSA","Process Spawn Analysis",{"name":49},{"id":721,"name":722,"tactic":723},"D3-PT","Process Termination",{"name":77},{"id":725,"name":726,"tactic":727},"D3-HR","Host Reboot",{"name":77},{"id":729,"name":730,"tactic":731},"D3-PLA","Process Lineage Analysis",{"name":49},{"id":733,"name":734,"tactic":735},"D3-PSMD","Process Self-Modification Detection",{"name":49},{"id":737,"name":738,"tactic":739},"D3-KBPI","Kernel-based Process Isolation",{"name":54},{"id":741,"name":742,"tactic":743},"D3-HS","Host Shutdown",{"name":77},{"id":745,"name":746,"tactic":747},"D3-SCF","System Call Filtering",{"name":54},{"id":749,"name":750,"tactics":751,"countermeasures":754},"T1562.001","Disable or Modify Tools",[752,753],{"id":28,"name":29},{"id":31,"name":32},[755,757,759,761,765,767,769,771,773,775,777,779],{"id":701,"name":702,"tactic":756},{"name":54},{"id":733,"name":734,"tactic":758},{"name":49},{"id":717,"name":718,"tactic":760},{"name":49},{"id":762,"name":763,"tactic":764},"D3-SDM","System Daemon Monitoring",{"name":49},{"id":737,"name":738,"tactic":766},{"name":54},{"id":745,"name":746,"tactic":768},{"name":54},{"id":709,"name":710,"tactic":770},{"name":54},{"id":725,"name":726,"tactic":772},{"name":77},{"id":741,"name":742,"tactic":774},{"name":77},{"id":721,"name":722,"tactic":776},{"name":77},{"id":705,"name":706,"tactic":778},{"name":77},{"id":729,"name":730,"tactic":780},{"name":49},{"id":782,"name":783,"tactics":784,"countermeasures":787},"T1562.002","Disable Windows Event Logging",[785,786],{"id":28,"name":29},{"id":31,"name":32},[788,792,794,798],{"id":789,"name":790,"tactic":791},"D3-ACH","Application Configuration Hardening",{"name":68},{"id":137,"name":138,"tactic":793},{"name":140},{"id":795,"name":796,"tactic":797},"D3-DRA","Disable Remote Access",{"name":68},{"id":133,"name":134,"tactic":799},{"name":98},{"id":801,"name":802,"tactics":803,"countermeasures":806},"T1562.004","Disable or Modify System Firewall",[804,805],{"id":28,"name":29},{"id":31,"name":32},[807,809],{"id":137,"name":138,"tactic":808},{"name":140},{"id":133,"name":134,"tactic":810},{"name":98},{"id":812,"name":813,"tactics":814,"countermeasures":817},"T1562.007","Disable or Modify Cloud Firewall",[815,816],{"id":28,"name":29},{"id":31,"name":32},[818,820],{"id":137,"name":138,"tactic":819},{"name":140},{"id":133,"name":134,"tactic":821},{"name":98},{"id":823,"name":824,"tactics":825,"countermeasures":828},"T1562.008","Disable or Modify Cloud Logs",[826,827],{"id":28,"name":29},{"id":31,"name":32},[829,831],{"id":137,"name":138,"tactic":830},{"name":140},{"id":133,"name":134,"tactic":832},{"name":98},{"id":834,"name":835,"tactics":836,"countermeasures":839},"T1562.009","Safe Mode Boot",[837,838],{"id":28,"name":29},{"id":31,"name":32},[840,842,844,846],{"id":56,"name":57,"tactic":841},{"name":54},{"id":133,"name":134,"tactic":843},{"name":98},{"id":127,"name":128,"tactic":845},{"name":49},{"id":137,"name":138,"tactic":847},{"name":140},[],[850,851],"GHSA-fhq3-p242-2qpf","GO-2026-6339",[],[854],{"_key":855},"OPENSUSE-SU-2026:21812-1",[],[858],{"_key":855},"2026-07-03T20:19:29.943Z","2026-07-07T17:00:40.149Z","Deferred",{"cisa_kev":863,"cisa_ransomware":863,"cisa_vendor":9,"epss_severity":864,"epss_score":865,"severity":866,"severity_score":867,"severity_version":868,"severity_source":869,"severity_vector":870,"severity_status":861},false,"low",0.00286,"medium",5.3,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",[872,880,884,889,893,898,902,906,910,915],{"url":873,"sources":874,"tags":877},"https://github.com/go-gitea/gitea/pull/36662",[869,875,876],"nvd","osv_go",[878,879],"Patch","WEB",{"url":881,"sources":882,"tags":883},"https://github.com/go-gitea/gitea/pull/36744",[869,875,876],[878,879],{"url":885,"sources":886,"tags":887},"https://github.com/go-gitea/gitea/releases/tag/v1.25.5",[869,875,876],[888,879],"Release Notes",{"url":890,"sources":891,"tags":892},"https://blog.gitea.com/release-of-1.25.5/",[869,875],[888],{"url":894,"sources":895,"tags":896},"https://nvd.nist.gov/vuln/detail/CVE-2026-20909",[876],[897],"Advisory",{"url":899,"sources":900,"tags":901},"https://github.com/go-gitea/gitea/commit/00566cc953dba772d2f38aa475d235fead461605",[876],[879],{"url":903,"sources":904,"tags":905},"https://github.com/go-gitea/gitea/commit/ed57c70176a6cac63f48ddf6b0d5f4f72cfea963",[876],[879],{"url":907,"sources":908,"tags":909},"https://blog.gitea.com/release-of-1.25.5",[876],[879],{"url":911,"sources":912,"tags":913},"https://github.com/go-gitea/gitea",[876],[914],"PACKAGE",{"url":916,"sources":917,"tags":918},"https://github.com/advisories/GHSA-fhq3-p242-2qpf",[876],[897],[],{"date":921,"score":865,"percentile":922},"2026-09-19",0.2137,[924,928,931,934,936,939,942,945,948,951,954,957,960,963,966,969,972,975,978,981,984,987,990,993,996,999,1002,1005,1008,1011,1014,1017,1020,1023,1026,1029,1032,1035,1038,1040,1043,1046,1049,1052,1055,1058,1061,1064,1067,1070,1073,1076,1080,1083,1086,1089,1091,1094,1097,1099,1102,1105,1108,1111,1114,1117,1120,1123,1126,1129,1132,1135,1138,1141,1144,1147,1149,1152],{"date":925,"score":926,"percentile":927},"2026-07-04",0.00159,0.0544,{"date":929,"score":926,"percentile":930},"2026-07-05",0.05441,{"date":932,"score":926,"percentile":933},"2026-07-06",0.05444,{"date":935,"score":926,"percentile":930},"2026-07-07",{"date":937,"score":865,"percentile":938},"2026-07-08",0.20411,{"date":940,"score":865,"percentile":941},"2026-07-09",0.20441,{"date":943,"score":865,"percentile":944},"2026-07-10",0.20453,{"date":946,"score":865,"percentile":947},"2026-07-11",0.20476,{"date":949,"score":865,"percentile":950},"2026-07-12",0.20469,{"date":952,"score":865,"percentile":953},"2026-07-13",0.20478,{"date":955,"score":865,"percentile":956},"2026-07-14",0.205,{"date":958,"score":865,"percentile":959},"2026-07-15",0.2053,{"date":961,"score":865,"percentile":962},"2026-07-16",0.20558,{"date":964,"score":865,"percentile":965},"2026-07-17",0.20572,{"date":967,"score":865,"percentile":968},"2026-07-18",0.20574,{"date":970,"score":865,"percentile":971},"2026-07-19",0.2057,{"date":973,"score":865,"percentile":974},"2026-07-20",0.20659,{"date":976,"score":865,"percentile":977},"2026-07-21",0.2066,{"date":979,"score":865,"percentile":980},"2026-07-22",0.20743,{"date":982,"score":865,"percentile":983},"2026-07-23",0.20726,{"date":985,"score":865,"percentile":986},"2026-07-24",0.20734,{"date":988,"score":865,"percentile":989},"2026-07-25",0.20807,{"date":991,"score":865,"percentile":992},"2026-07-26",0.208,{"date":994,"score":865,"percentile":995},"2026-07-27",0.20776,{"date":997,"score":865,"percentile":998},"2026-07-28",0.20837,{"date":1000,"score":865,"percentile":1001},"2026-07-29",0.20834,{"date":1003,"score":865,"percentile":1004},"2026-07-30",0.20853,{"date":1006,"score":865,"percentile":1007},"2026-07-31",0.20868,{"date":1009,"score":865,"percentile":1010},"2026-08-01",0.20872,{"date":1012,"score":865,"percentile":1013},"2026-08-02",0.20871,{"date":1015,"score":865,"percentile":1016},"2026-08-03",0.20884,{"date":1018,"score":865,"percentile":1019},"2026-08-04",0.20826,{"date":1021,"score":865,"percentile":1022},"2026-08-05",0.20746,{"date":1024,"score":865,"percentile":1025},"2026-08-06",0.20753,{"date":1027,"score":865,"percentile":1028},"2026-08-07",0.20767,{"date":1030,"score":865,"percentile":1031},"2026-08-08",0.2077,{"date":1033,"score":865,"percentile":1034},"2026-08-09",0.20763,{"date":1036,"score":865,"percentile":1037},"2026-08-10",0.20775,{"date":1039,"score":865,"percentile":1013},"2026-08-11",{"date":1041,"score":865,"percentile":1042},"2026-08-12",0.20916,{"date":1044,"score":865,"percentile":1045},"2026-08-13",0.20944,{"date":1047,"score":865,"percentile":1048},"2026-08-14",0.20968,{"date":1050,"score":865,"percentile":1051},"2026-08-15",0.21123,{"date":1053,"score":865,"percentile":1054},"2026-08-16",0.21144,{"date":1056,"score":865,"percentile":1057},"2026-08-17",0.21064,{"date":1059,"score":865,"percentile":1060},"2026-08-18",0.21082,{"date":1062,"score":865,"percentile":1063},"2026-08-19",0.21161,{"date":1065,"score":865,"percentile":1066},"2026-08-20",0.21196,{"date":1068,"score":865,"percentile":1069},"2026-08-21",0.2122,{"date":1071,"score":865,"percentile":1072},"2026-08-22",0.21226,{"date":1074,"score":865,"percentile":1075},"2026-08-23",0.21207,{"date":1077,"score":1078,"percentile":1079},"2026-08-24",0.0039,0.31803,{"date":1081,"score":1078,"percentile":1082},"2026-08-25",0.31828,{"date":1084,"score":1078,"percentile":1085},"2026-08-26",0.31916,{"date":1087,"score":1078,"percentile":1088},"2026-08-27",0.31948,{"date":1090,"score":1078,"percentile":1085},"2026-08-28",{"date":1092,"score":1078,"percentile":1093},"2026-08-29",0.3195,{"date":1095,"score":1078,"percentile":1096},"2026-08-30",0.32046,{"date":1098,"score":1078,"percentile":1096},"2026-08-31",{"date":1100,"score":1078,"percentile":1101},"2026-09-01",0.32071,{"date":1103,"score":865,"percentile":1104},"2026-09-02",0.20709,{"date":1106,"score":865,"percentile":1107},"2026-09-03",0.20723,{"date":1109,"score":865,"percentile":1110},"2026-09-04",0.20754,{"date":1112,"score":865,"percentile":1113},"2026-09-05",0.20781,{"date":1115,"score":865,"percentile":1116},"2026-09-06",0.20813,{"date":1118,"score":865,"percentile":1119},"2026-09-07",0.20821,{"date":1121,"score":865,"percentile":1122},"2026-09-08",0.20831,{"date":1124,"score":865,"percentile":1125},"2026-09-09",0.2095,{"date":1127,"score":865,"percentile":1128},"2026-09-10",0.20952,{"date":1130,"score":865,"percentile":1131},"2026-09-11",0.2096,{"date":1133,"score":865,"percentile":1134},"2026-09-12",0.21067,{"date":1136,"score":865,"percentile":1137},"2026-09-13",0.20996,{"date":1139,"score":865,"percentile":1140},"2026-09-14",0.2102,{"date":1142,"score":865,"percentile":1143},"2026-09-15",0.21093,{"date":1145,"score":865,"percentile":1146},"2026-09-16",0.21178,{"date":1148,"score":865,"percentile":1072},"2026-09-17",{"date":1150,"score":865,"percentile":1151},"2026-09-18",0.21368,{"date":921,"score":865,"percentile":922},[1154,1159,1161],{"source":869,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1155,"cvss_v4_0":9},{"baseScore":867,"baseSeverity":1156,"vectorString":870,"impactScore":1157,"exploitabilityScore":1158},"MEDIUM",2.3,10,{"source":875,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1160,"cvss_v4_0":9},{"baseScore":867,"baseSeverity":1156,"vectorString":870,"impactScore":1157,"exploitabilityScore":1158},{"source":876,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1162,"cvss_v4_0":9},{"baseScore":867,"baseSeverity":9,"vectorString":870,"impactScore":1157,"exploitabilityScore":1158},[1164,1175],{"ecosystem":9,"name":1165,"vendor":1166,"product":1167,"cpe_part":1168,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1169},"Gitea Open Source Git Server","gitea","gitea open source git server","a",[1170],{"version":1171,"is_range":1172,"range_type":869,"version_start":9,"version_start_type":9,"version_end":1173,"version_end_type":1174,"fixed_in":9},"\u003C 1.25.5",true,"1.25.5","excluding",{"ecosystem":1176,"name":1177,"vendor":1178,"product":1166,"cpe_part":9,"purl_type":1179,"purl_namespace":1178,"purl_name":1166,"source":9,"versions":1180},"Go","code.gitea.io/gitea","code.gitea.io","golang",[1181],{"version":1182,"is_range":1172,"range_type":1183,"version_start":9,"version_start_type":9,"version_end":1173,"version_end_type":1174,"fixed_in":9},"lt1_25_5","semver"]