spingARbor
9 credited records · 9 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2026-20912No exploit | Gitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosuregitea · gitea · CWE-284 | Critical9.1 | — | 0.4% | Jan 22, 2026 |
26Monitor | CVE-2026-20904No exploit | Gitea: Broken access control in OpenID visibility toggle enables cross-user visibility changesgitea · gitea · CWE-284 | Medium6.5 | — | 0.3% | Jan 22, 2026 |
36Monitor | CVE-2026-20897No exploit | Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR)gitea · gitea · CWE-284 | Critical9.1 | — | 0.4% | Jan 22, 2026 |
17Monitor | CVE-2026-20888No exploit | Gitea Pull Requests Auto-Merge: Read-Only Users Can Cancel Scheduled Auto-Merge via Web Endpoint (Authorization Bypass)gitea · gitea · CWE-284 | Medium4.3 | — | 0.3% | Jan 22, 2026 |
26Monitor | CVE-2026-20883No exploit | Gitea Stopwatch API Missing Authorization Check Leads to Post-Revocation Information Disclosuregitea · gitea · CWE-284 | Medium6.5 | — | 0.3% | Jan 22, 2026 |
26Monitor | CVE-2026-20800No exploit | Notification API Leaks Private Repository Issue Titles After Collaborator Permission Revocationgitea · gitea · CWE-200 | Medium6.5 | — | 0.4% | Jan 22, 2026 |
36Monitor | CVE-2026-20750No exploit | Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR)gitea · gitea · CWE-284 | Critical9.1 | — | 0.4% | Jan 22, 2026 |
30Monitor | CVE-2026-20736No exploit | Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Checkgitea · gitea · CWE-284 | High7.5 | — | 0.4% | Jan 22, 2026 |
14Monitor | CVE-2026-0798No exploit | Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocationgitea · gitea · CWE-284 | Low3.5 | — | 0.2% | Jan 22, 2026 |
- CVE-2026-2091236Monitor
Gitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosure
CriticalCVSS 9.1No exploitEPSS 0%gitea · giteaJan 22, 2026
- CVE-2026-2090426Monitor
Gitea: Broken access control in OpenID visibility toggle enables cross-user visibility changes
MediumCVSS 6.5No exploitEPSS 0%gitea · giteaJan 22, 2026
- CVE-2026-2089736Monitor
Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR)
CriticalCVSS 9.1No exploitEPSS 0%gitea · giteaJan 22, 2026
- CVE-2026-2088817Monitor
Gitea Pull Requests Auto-Merge: Read-Only Users Can Cancel Scheduled Auto-Merge via Web Endpoint (Authorization Bypass)
MediumCVSS 4.3No exploitEPSS 0%gitea · giteaJan 22, 2026
- CVE-2026-2088326Monitor
Gitea Stopwatch API Missing Authorization Check Leads to Post-Revocation Information Disclosure
MediumCVSS 6.5No exploitEPSS 0%gitea · giteaJan 22, 2026
- CVE-2026-2080026Monitor
Notification API Leaks Private Repository Issue Titles After Collaborator Permission Revocation
MediumCVSS 6.5No exploitEPSS 0%gitea · giteaJan 22, 2026
- CVE-2026-2075036Monitor
Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR)
CriticalCVSS 9.1No exploitEPSS 0%gitea · giteaJan 22, 2026
- CVE-2026-2073630Monitor
Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Check
HighCVSS 7.5No exploitEPSS 0%gitea · giteaJan 22, 2026
- CVE-2026-079814Monitor
Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocation
LowCVSS 3.5No exploitEPSS 0%gitea · giteaJan 22, 2026