1998 matches found
Cross Site Scripting (XSS)
code.gitea.io/gitea is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper validation of URL schemes in links, which allows an attacker to inject malicious javascript: URLs and execute arbitrary scripts in a user's browser...
Information Disclosure
code.gitea.io/gitea is vulnerable to information disclosure. The vulnerability is due to improper exposure of user metadata through sortable fields such as last login time, which allows an attacker to infer users' login activity by manipulating the explore/users sort order...
Cross-Site Scripting (XSS)
code.gitea.io/gitea is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user input in the search input box used for creating tags and branches, where v-html is used instead of v-text, which allows an attacker to inject and execute malicious scripts in the...
Security update for gitea-tea (moderate)
openSUSE Security Update: Security update for gitea-tea Announcement ID: openSUSE-SU-2026:0073-1 Rating: moderate References: Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVE-2025-58190 SUSE:...
Security update for gitea-tea (moderate)
openSUSE Security Update: Security update for gitea-tea Announcement ID: openSUSE-SU-2026:0074-1 Rating: moderate References: Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVE-2025-58190 SUSE:...
openSUSE 16 Security Update : gitea-tea (openSUSE-SU-2026:20318-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20318-1 advisory. Changes in gitea-tea: - update to 0.12.0: New Features - Add tea actions commands for managing workflow runs and workflows in 880, 796 - Add tea...
OPENSUSE-SU-2026:20318-1 Security update for gitea-tea
This update for gitea-tea fixes the following issues: Changes in gitea-tea: - update to 0.12.0: New Features - Add tea actions commands for managing workflow runs and workflows in 880, 796 - Add tea api subcommand for arbitrary API calls not covered by existing commands in 879 - Add repository...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: crossplane-provider-family-aws-fips, datadog-agent-fips, kubevela, sops-fips, argo-events, vault, terraform-provider-pagerduty, crossplane-provider-aws-kms, crossplane-provider-aws-rds, crossplane-provider-aws-kinesis, snyk-cli, tekton-pipelines-fips, k9s, livekit-cl...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: crossplane-provider-family-aws-fips, datadog-agent-fips, kubevela, sops-fips, argo-events, vault, terraform-provider-pagerduty, crossplane-provider-aws-kms, crossplane-provider-aws-rds, crossplane-provider-aws-kinesis, snyk-cli, tekton-pipelines-fips, k9s, livekit-cl...
ROS-20260224-73-0029
Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...
ROS-20260224-73-0028
Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...
ROS-20260224-73-0033
Vulnerability in gitea related to lack of protection for proprietary data. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information...
ROS-20260224-73-0034
Vulnerability in gitea related to a flaw in the authorization mechanism. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...
ROS-20260224-73-0025
Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...
ROS-20260224-73-0035
Vulnerability in gitea related to a flaw in the authorization mechanism. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...
ROS-20260224-73-0026
Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...
ROS-20260224-73-0032
A vulnerability in the Gitea Git repository management system is related to access control errors. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information...
ROS-20260224-73-0036
Vulnerability in gitea related to improper alternate path protection. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...