Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Gitea | Gitea | unaffected |
|
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
No data.
Project Subscriptions
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Sun, 18 Oct 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Requesting `/{username}/-/repositories` for an individual user instead of an organization made the organization home handler dereference a nil organization and panic. The request needs no authentication and no special configuration. The server answered with an HTTP 500 error and logged a panic for each request; the fix returns 404 for individual users. | |
| Title | Gitea panic on the repositories route of individual users | |
| Weaknesses | CWE-248 CWE-476 |
|
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Gitea
Published:
Updated: 2026-10-18T18:56:41.198Z
Reserved: 2026-10-14T20:08:45.842Z
Link: CVE-2026-105661
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-18T19:16:32.590
Modified: 2026-10-18T19:16:32.590
Link: CVE-2026-105661
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-18T21:00:10Z