CVE-2026-96594 · Brief

CVEs like CVE-2026-96594

The records whose text reads closest to CVE-2026-96594, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2024-68860.768
   Inproper Sanitation of field leading to stored XSS

   Same weakness class, CWE-79 (cross-site scripting); same vendor or product family, Gitea.

2. CVE-2026-1036670.827
   Gitea container registry stored XSS through blob media type

   Same weakness class, CWE-79 (cross-site scripting); same vendor or product family, Gitea.

3. CVE-2021-283780.771
   Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.

   Same weakness class, CWE-79 (cross-site scripting); same vendor or product family, Gitea.

4. CVE-2021-453290.786
   Cross Site Scripting (XSS) vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external…

   Same weakness class, CWE-79 (cross-site scripting); same vendor or product family, Gitea.

5. CVE-2019-10103140.816
   Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS).

   Same weakness class, CWE-79 (cross-site scripting); same vendor or product family, Gitea.

6. CVE-2022-19280.772
   Cross-site Scripting (XSS) - Stored in go-gitea/gitea

   Same weakness class, CWE-79 (cross-site scripting).

7. CVE-2019-10102610.773
   Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS).

   Same weakness class, CWE-79 (cross-site scripting); same vendor or product family, Gitea.

8. CVE-2025-689460.764
   In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.

   Same weakness class, CWE-79 (cross-site scripting); same vendor or product family, Gitea.

9. CVE-2025-689420.728
   Gitea before 1.22.2 allows XSS because the search input box (for creating tags and branches) is v-html instead of…

   Same weakness class, CWE-79 (cross-site scripting); same vendor or product family, Gitea.

10. CVE-2018-175370.710
    An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x…

    Same weakness class, CWE-79 (cross-site scripting).

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.