CVE-2026-50105

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:47+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-6cqf-375w-639g...

CVE-2026-58417

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:45+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-jr5x-6h83-wrxf...

CVE-2026-54481

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:42+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-94v3-77j7-vm48...

CVE-2026-58434

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:40+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-j2w3-9c3r-g83q...

CVE-2026-55982

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:37+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-mg4f-x9v4-6h2p...

CVE-2026-55984

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:35+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-m932-crvm-gcp5...

CVE-2026-58420

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:32+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-5ggr-2f2h-jmvm...

CVE-2026-58435

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:29+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-rh79-75qm-gwjr...

CVE-2026-55987

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:27+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-vrhc-jjfc-m3m3...

CVE-2026-56657

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:25+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-4xjf-493q-98p3 2026-08-14 12:45:16+00:00| seen|...

CVE-2026-58314

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:23+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-2fcr-jfvc-vgg2...

CVE-2026-24451

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:20+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-wrf9-r3h7-7x5v...

CVE-2026-25038

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:18+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-v73x-hx65-6pf4...

CVE-2026-58427

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:14+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-prr9-9mp4-5gp2 2026-08-15 18:03:40+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mt5b2vwwe22o 2026-08-15...

CVE-2026-58431

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:11+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-h56g-4qw7-2mxg...

CVE-2026-59765

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:07+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-2wm4-vwp6-v7xc...

CVE-2026-58429

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:05+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-fq2p-5p22-8g6j...

EUVD-2026-41613

Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth X-Gitea-OTP surface...

Improper Restriction of Security Token Assignment

Overview Affected versions of this package are vulnerable to Improper Restriction of Security Token Assignment in the organization and permission endpoints when a personal access token is restricted to public-only scope. An attacker can access private organization membership and authorization...

Improper Restriction of Security Token Assignment

Overview Affected versions of this package are vulnerable to Improper Restriction of Security Token Assignment in the organization and permission endpoints when a personal access token is restricted to public-only scope. An attacker can access private organization membership and authorization...