https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:22:32 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-101023 <p>Gitea&#39;s OAuth2 token endpoint verified the signature and grant of a token submitted with the `refresh_token` grant type, but not that the token was a refresh token. An unexpired access token for the same OAuth2 application and grant could be exchanged for a new access token and refresh token. Whoever holds such an access token could keep access beyond the token&#39;s original lifetime.</p> <p>Gitea&#39;s OAuth2 token endpoint verified the signature and grant of a token submitted with the `refresh_token` grant type, but not that the token was a refresh token. An unexpired access token for the same OAuth2 application and grant could be exchanged for a new access token and refresh token. Whoever holds such an access token could keep access beyond the token&#39;s original lifetime.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-101023