CVE-2026-58432: Exposure of Sensitive Information to an Unauthorized Actor

Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...

GO-2026-4367 Gitea has improper access control for uploaded attachments in code.gitea.io/gitea

Gitea has improper access control for uploaded attachments in code.gitea.io/gitea...

GO-2022-0832 Cross-site Scripting in Gitea in code.gitea.io/gitea

Cross-site Scripting in Gitea in code.gitea.io/gitea...

GO-2022-0609 Gitea Missing Authorization vulnerability in code.gitea.io/gitea

Gitea Missing Authorization vulnerability in code.gitea.io/gitea...

GO-2022-0450 Shell command injection in gitea in code.gitea.io/gitea

Shell command injection in gitea in code.gitea.io/gitea...

GO-2023-1971 Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea...

GO-2023-1922 Gitea XSS Vulnerability in code.gitea.io/gitea

Gitea XSS Vulnerability in code.gitea.io/gitea...

GO-2024-2769 Gitea allowed assignment of private issues in code.gitea.io/gitea

Gitea allowed assignment of private issues in code.gitea.io/gitea...

GO-2024-2752 Gitea Open Redirect in code.gitea.io/gitea

Gitea Open Redirect in code.gitea.io/gitea...

GO-2024-2757 Buffer Overflow in gitea in code.gitea.io/gitea

Buffer Overflow in gitea in code.gitea.io/gitea...