CVE-2026-58432 Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea

Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...

CVE-2026-58314 Two SSRF findings in Gitea 1.26.2

Two SSRF findings in Gitea 1.26.2...

CVE-2026-58314

CVE-2026-58314 _ Two SSRF findings in Gitea 1.26.2. The NVD entry reports two SSRF vulnerabilities in Gitea 1.26.2 with CVSS v3.1 vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N and a base score of 7.7 (HIGH). The connected sources also reference public advisories and a later release addressi...

CVE-2026-58314 Two SSRF findings in Gitea 1.26.2

Two SSRF findings in Gitea 1.26.2...

CVE-2026-56657 Gitea SSH Key Parser Denial of Service

Gitea SSH Key Parser Denial of Service...

CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session

Gitea Remember-Me Token Theft Not Invalidating Attacker Session...

CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session

Gitea Remember-Me Token Theft Not Invalidating Attacker Session...

CVE-2026-56750

CVE-2026-56750 describes a vulnerability in Gitea where Remember-Me tokens fail to invalidate prior attacker sessions, enabling session persistence after compromise. The root cause is described as deficiencies in access control, potentially enabling privilege-related impact. Publicly documented i...

EUVD-2026-58144

Gitea SSH Key Parser Denial of Service...

CVE-2026-56657

CVE-2026-56657 – Gitea SSH Key Parser DoS : Affects Gitea; vulnerability resides in the SSH key parser, enabling a Denial of Service condition. CVSSv3.1 indicates LOCAL attack vector, low attack complexity, no privileges, no user interaction, with Availability Impact HIGH and Confidentiality/Inte...

CVE-2026-56657 Gitea SSH Key Parser Denial of Service

Gitea SSH Key Parser Denial of Service...

CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session

Gitea Remember-Me Token Theft Not Invalidating Attacker Session...

CLEANSTART-2026-YI59826 Security fixes in gitea 1.26.4-r1

Package gitea version 1.26.4-r1 fixes 9 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-56852, CVE-2026-71556, CVE-2026-71557, ghsa-259r-337f-4rfw...

ROS-20260813-73-0031

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260813-73-0012

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260813-73-0010

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260813-73-0011

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260813-73-0029

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260813-73-0023

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260813-73-0025

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...