ROS-20260224-73-0029

Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...

ROS-20260224-73-0033

Vulnerability in gitea related to lack of protection for proprietary data. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information...

ROS-20260224-73-0028

Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...

ROS-20260224-73-0035

Vulnerability in gitea related to a flaw in the authorization mechanism. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROS-20260224-73-0025

Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...

ROS-20260224-73-0034

Vulnerability in gitea related to a flaw in the authorization mechanism. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROS-20260224-73-0032

A vulnerability in the Gitea Git repository management system is related to access control errors. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information...

ROS-20260224-73-0026

Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...

ROS-20260224-73-0027

Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...

ROS-20260224-73-0031

Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...

ROS-20260224-73-0030

Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...

ROS-20260224-73-0036

Vulnerability in gitea related to improper alternate path protection. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: sops-fips, mattermost, vault, caddy, telegraf, timestamp-authority, hydra-fips, tkn-fips, loki, age, fulcio-fips, apko-fips, rekor-fips, jitsucom-bulker, dex, ory-kratos-fips, step-fips, gitea, kyverno-fips, ory-kratos, sqlexporter, argo-workflows, juicefs, fulcio,...

The vulnerability of the Git repository management system Gitea, related to access control errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git repository management system Gitea is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Exploit for OS Command Injection in Gitea

Gitea Git Hooks RCE CVE-2020-14144 OffsecProvingGrounds P...

SUSE CVE-2026-0798

Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private, users who previously watched the repository may continue to receive release notifications, potentially disclosing release titles, tags,...

SUSE CVE-2026-20736

Gitea does not properly verify repository context when deleting attachments. A user who previously uploaded an attachment to a repository may be able to delete it after losing access to that repository by making the request through a different repository they can access...

SUSE CVE-2026-20750

Gitea does not properly validate project ownership in organization project operations. A user with project write access in one organization may be able to modify projects belonging to a different organization...

SUSE CVE-2026-20800

Gitea's notification API does not re-validate repository access permissions when returning notification details. After a user's access to a private repository is revoked, they may still view issue and pull request titles through previously received notifications...

SUSE CVE-2026-20883

Gitea's stopwatch API does not re-validate repository access permissions. After a user's access to a private repository is revoked, they may still view issue titles and repository names through previously started stopwatches...