← All credits

kamil-sawicki

3 vulnerability records and advisories credit this contributor.

Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes

Insufficient server-side validation of board member role fields permits privilege escalation

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write