PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← Back | CVE Intelligence Hub

CVE-2026-42931

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-42931.

Coverage Span
2026-08-14
Reports
2 related reports

Associated Reports & Timeline

1.
CVE-2026-42931: DoS por leitura ilimitada do corpo da requisição no endpoint npm do Gitea
yokai.hakaisecurity.io | vulnerability | | Original ↗ | .md | #vulnerability-research | #research | #dos
Abstract Quanto de memória uma pequena requisição destinada a alterar a tag de um pacote deveria consumir? Em condições normais, apenas alguns bytes. Afinal, o endpoint analisado neste artigo espera receber somente uma string contendo a versão de um pacote NPM, como "1.0.0". Entretanto, durante a análise do Package Registry do Gitea, foi identificado um […]
2.
CVE-2026-42931: DoS via Unbounded Request Body Read in Gitea’s npm Endpoint
yokai.hakaisecurity.io | vulnerability | | Original ↗ | .md | #vulnerability-research | #research | #dos
Abstract How much memory should a small request intended to change a package’s tag consume? Under normal conditions, just a few bytes. After all, the endpoint analyzed in this article expects to receive only a string containing the version of an NPM package, such as "1.0.0". However, during analysis of Gitea’s Package Registry, a behavior […]