CVE-2026-46603 vulnerabilities

Vulnerabilities for packages: kubescape-server, rclone, mattermost, pdfcpu, mattermost-fips, seaweedfs-operator-fips, seaweedfs-rocksdb-fips, mailpit, ollama, nemo, gitea-fips, seaweedfs-rocksdb, seaweedfs-fips, kubescape, mailpit-fips, kitty, fortio-fips, seaweedfs, seaweedfs-operator, gitea,...

GO-2026-6222 vulnerabilities

Vulnerabilities for packages: gitea, kubescape, mattermost, kitty, ollama, rclone, pdfcpu, seaweedfs, mailpit, bento...

CVE-2026-46603 vulnerabilities

Vulnerabilities for packages: gitea, kubescape, mattermost, kitty, ollama, rclone, pdfcpu, seaweedfs, mailpit, bento...

Exploit for CVE-2026-20896

CVE-2026-20896 - Gitea ≤1.26.2 Authentication Bypass 1. What...

CVE-2026-57897

creationtimestamp| type| source ---|---|--- 2026-08-14 12:45:14+00:00| seen| https://www.acn.gov.it/portale/w/gitea-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

CVE-2026-58511

creationtimestamp| type| source ---|---|--- 2026-08-14 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/gitea-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

CVE-2026-22555

A flaw was found in Gitea. An API Application Programming Interface endpoint responsible for forking repositories into an organization failed to properly check if a user had the necessary permissions to create repositories within that organization. This allowed a read-only organization member to...

GO-2025-3988 vulnerabilities

Vulnerabilities for packages: sftpgo, gitea, gitea-fips...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2022-0470 vulnerabilities

Vulnerabilities for packages: gitness, gitea, grafana, mattermost-fips, gitea-fips...

GO-2025-3988 vulnerabilities

Vulnerabilities for packages: gitea, sftpgo...

GO-2022-0470 vulnerabilities

Vulnerabilities for packages: gitea, gitness...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: gitea, atlantis, fluent-bit-plugin-loki, oauth2-proxy, authservice, kots, splunk-otel-collector, falcosidekick...

GO-2026-4961 vulnerabilities

Vulnerabilities for packages: gitea, kubescape, mattermost, ollama, rclone, pdfcpu, seaweedfs, bento...

GO-2026-5061 vulnerabilities

Vulnerabilities for packages: gitea, kubescape, mattermost, ollama, rclone, pdfcpu, seaweedfs, mailpit, bento...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: dagger, kaniko, nuclei, src-fingerprint, trivy, wolfictl, tfsec, pulumi-language-dotnet, task, kots, argo-workflows, flux-image-automation-controller, go-licenses, grafana-alloy, k8sgpt, bom, k9s, chezmoi, pulumi-kubernetes-operator, timoni, gitsign, zot, melange,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: dagger, kaniko, nuclei, src-fingerprint, trivy, wolfictl, tfsec, pulumi-language-dotnet, task, kots, argo-workflows, flux-image-automation-controller, go-licenses, grafana-alloy, k8sgpt, bom, k9s, chezmoi, pulumi-kubernetes-operator, timoni, gitsign, zot, melange,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: dagger, kaniko, nuclei, rancher-fleet, src-fingerprint, trivy, wolfictl, gomplate, external-secrets-operator, pulumi-language-dotnet, steampipe, tfsec, kots, argo-workflows, flux-image-automation-controller, trufflehog, grafana-alloy, bom, k9s, chezmoi,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: glab, minio, step-issuer, trivy, aactl, gh, falcoctl, crossplane-provider-family-azure, k9s, fulcio, mattermost, prometheus-operator, trivy-operator, crossplane-provider-aws-lambda, zot, k3s, crossplane-provider-aws-cloudformation, src, crossplane-provider-aws-iam,...

CVE-2026-56657

A flaw was found in Gitea. The SSH Key Parser component is vulnerable to a denial of service. A remote attacker could potentially exploit this by submitting a specially crafted SSH key, leading to the unavailability of the Gitea service. Mitigation Mitigation for this issue is either not availabl...