1984 matches found
CVE-2026-46603 vulnerabilities
Vulnerabilities for packages: rclone, ollama, kubescape, mailpit, pdfcpu, gitea, mattermost, bento, seaweedfs, kitty...
CVE-2026-22555
A flaw was found in Gitea. An API Application Programming Interface endpoint responsible for forking repositories into an organization failed to properly check if a user had the necessary permissions to create repositories within that organization. This allowed a read-only organization member to...
GO-2025-4261 vulnerabilities
Vulnerabilities for packages: gitea-fips...
GO-2025-3988 vulnerabilities
Vulnerabilities for packages: gitea-fips, sftpgo, gitea...
GO-2022-0470 vulnerabilities
Vulnerabilities for packages: gitness, mattermost-fips, gitea, grafana, gitea-fips...
GO-2025-3988 vulnerabilities
Vulnerabilities for packages: gitea, sftpgo...
GO-2022-0470 vulnerabilities
Vulnerabilities for packages: gitea, gitness...
GO-2025-3540 vulnerabilities
Vulnerabilities for packages: authservice, oauth2-proxy, fluent-bit-plugin-loki, gitea, falcosidekick, atlantis, splunk-otel-collector, kots...
GO-2026-5061 vulnerabilities
Vulnerabilities for packages: rclone, ollama, kubescape, mailpit, pdfcpu, gitea, mattermost, bento, seaweedfs...
GO-2026-4961 vulnerabilities
Vulnerabilities for packages: rclone, ollama, kubescape, pdfcpu, gitea, mattermost, bento, seaweedfs...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller, grafana-alloy, kargo, task, wolfictl, apko, gitsign, grype, go-licenses, flux-source-controller, nuclei, kots, gptscript, guac, k8sgpt, kubescape, crossplane, skaffold, dagger, kubevela, flux-kustomize-controller, zarf,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller, grafana-alloy, kargo, task, wolfictl, apko, gitsign, grype, go-licenses, flux-source-controller, nuclei, kots, gptscript, guac, k8sgpt, kubescape, crossplane, skaffold, dagger, kubevela, flux-kustomize-controller, zarf,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller, grafana-alloy, kargo, rancher-fleet, wolfictl, witness, apko, gitsign, grype, trivy-operator, flux-source-controller, gitlab-runner, nuclei, kots, kyverno, gptscript, guac, kubescape, crossplane, skaffold, dagger, kubevela, zarf,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudfront, policy-controller, kaf, kargo, spire-server, terraform-provider-azapi, docker-compose, trivy-operator, cloudflared, vault-benchmark, kine, crossplane-provider-azure-sql, flux-kustomize-controller, crossplane-provider-aws-kinesis,...
CVE-2026-56657
A flaw was found in Gitea. The SSH Key Parser component is vulnerable to a denial of service. A remote attacker could potentially exploit this by submitting a specially crafted SSH key, leading to the unavailability of the Gitea service. Mitigation Mitigation for this issue is either not availabl...
CVE-2026-59763
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...
CVE-2026-58508
Two SSRF vulnerabilities in Gitea migration/mirror DNS rebinding + missing re-validation...
CVE-2026-58435
Gitea LFS Deploy-Key Privilege Escalation...
CVE-2026-58432
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...