2953 matches found
CVE-2025-29923 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, atlantis, oauth2-proxy, gitea, authservice, falcosidekick, kots, fluent-bit-plugin-loki...
GHSA-92CP-5422-2MW7 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, atlantis, oauth2-proxy, gitea, authservice, falcosidekick, kots, fluent-bit-plugin-loki...
GHSA-92CP-5422-2MW7 vulnerabilities
Vulnerabilities for packages: juicefs, rekor-fips, gitea-fips, loki-fips, kots, argo-cd-fips, gitea, oauth2-proxy, loki, authservice, falcosidekick, keda, splunk-otel-collector-fips, argo-cd, dapr, dapr-fips, opentelemetry-collector-contrib-fips, splunk-otel-collector, traefik-fips,...
CVE-2025-29923 vulnerabilities
Vulnerabilities for packages: juicefs, rekor-fips, gitea-fips, loki-fips, kots, argo-cd-fips, gitea, oauth2-proxy, loki, authservice, falcosidekick, keda, splunk-otel-collector-fips, argo-cd, dapr, dapr-fips, opentelemetry-collector-contrib-fips, splunk-otel-collector, traefik-fips,...
openSUSE 15 Security Update : gitea-tea (openSUSE-SU-2025:0094-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0094-1 advisory. - gitea-te: update newer dependencies to fix security issues boo1235367 boo1239493 boo1234598 Tenable has extracted the preceding description blo...
OPENSUSE-SU-2025:0094-1 Security update for gitea-tea
This update for gitea-tea fixes the following issues: - gitea-te: update newer dependencies to fix security issues boo1235367 boo1239493 boo1234598...
Security update for gitea-tea (moderate)
openSUSE Security Update: Security update for gitea-tea Announcement ID: openSUSE-SU-2025:0094-1 Rating: moderate References: 1234598 1235367 1239493 Cross-References: CVE-2024-45337 CVE-2024-45338 CVE-2025-22869 CVSS scores: CVE-2024-45337 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H...
Gitea 1.24.0 - HTML Injection
Exploit Title: Gitea 1.24.0 - HTML Injection Date: 2025-03-09 Exploit Author: Mikail KOCADAĞ Vendor Homepage: https://gitea.com Software Link: https://dl.gitea.io/gitea/1.24.0/ Version: 1.24.0 Tested on: Windows 10, Linux Ubuntu 22.04 CVE : N/A Vulnerability Description: In Gitea 1.24.0, the...
Gitea 1.24.0+dev HTML Injection / Cross Site Scripting
Gitea version 1.24.0+dev suffers from an html injection vulnerability that can allow for cross site scripting. Title: Gitea 1.24.0+dev HTML Injection Vulnerability Description: Gitea version 1.24.0+dev-355-g74c8e95e87 is vulnerable to an HTML Injection vulnerability. The issue arises due to...
CVE-2022-1058
Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...
Exploit for CVE-2024-45337
Proof of Concept exploit for CVE-2024-45337 === This repository...
FreeBSD : gitea -- multiple vulnerabilities (6ea20f0c-bca3-11ef-8926-9b4f2d14eb53)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6ea20f0c-bca3-11ef-8926-9b4f2d14eb53 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
FreeBSD : gitea -- Fix misuse of PublicKeyCallback (38e6f778-bca3-11ef-8926-9b4f2d14eb53)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 38e6f778-bca3-11ef-8926-9b4f2d14eb53 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
FreeBSD : gitea -- multiple vulnerabilities (453cd84e-bca4-11ef-8926-9b4f2d14eb53)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 453cd84e-bca4-11ef-8926-9b4f2d14eb53 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
gitea -- Fix misuse of PublicKeyCallback
Problem Description: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto...
GHSA-V778-237X-GJRC vulnerabilities
Vulnerabilities for packages: zarf, kubeflow-pipelines, cloudnative-pg, crossplane-provider-aws-ec2, gitness, rclone, trillian, k8sgpt, descheduler, grafana-agent-operator, jitsucom-bulker, octo-sts, kaniko, slsa-verifier, tfsec, fulcio, flux-image-reflector-controller, lazygit, k3d,...
gitea -- multiple vulnerabilities
Problem Description: Fix delete branch perm checking Upgrade crypto library...
Server Side Request Forgery (SSRF)
Gitea and Gogs are vulnerable to Server Side Request Forgery SSRF. The vulnerability is due to insufficient input sanitization or filtering of webhook URLs, which allows attackers to send malicious requests that exploit the SSRF flaw and gain access to internal services...
FreeBSD : gitea -- token missing access control for packages (79b1f4ee-860a-11ef-b2dc-cbccbf25b7ea)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 79b1f4ee-860a-11ef-b2dc-cbccbf25b7ea advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...