CVE-2026-105964

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-105964
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105964.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-105964
Aliases
  • GHSA-6f9g-7jgm-m5ph
Published
2026-10-18T18:56:47Z
Modified
2026-10-19T10:45:09Z
Summary
Gitea Actions artifact v4 API unbounded request body
Details

The Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limit. A user who can run a workflow and obtains the runner token of that run could send an oversized request to the artifact service and exhaust the memory of the server, which terminates the Gitea process. The request body is now limited to 1 MiB.

Database specific 
{
    "cna_assigner":  "Gitea",
    "cwe_ids":  [
        "CWE-770"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105964.json"
}
References

Affected packages

Git / github.com/go-gitea/gitea

Affected ranges

Type
GIT
Repo
https://github.com/go-gitea/gitea
Events
Introduced
803b0c9ab43f809e47f42fad951e7f5fb6652e42
Last Affected
4ebd5e319b6a9e629bfd7a04292a6fe85b08dee9
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "1.22.0"
        },
        {
            "last_affected":  "28.1.0"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105964.json"