2925 matches found
PT-2026-107172
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description A flaw exists in Gitea Actions where older runs within the same workflow-level concurrency group are cancelled upon the insertion of a new run without verifying if the new run requires approval...
PT-2026-107307
With repository FORCE PRIVATE = true, Gitea creates new repositories as private, but the post-receive hook still applied the repo.private=false push option to an empty repository created by push. Any user who can create repositories could make their new repository public in violation of the...
PT-2026-107220
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea Actions incorrectly determined if a fork pull request run required approval by checking the user who triggered the event instead of the pull request author. When a maintainer performed...
PT-2026-107308
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The API endpoint GET /api/v1/repos/owner/repo/media/filepath fails to include the proper content type and disposition headers when serving files up to 1 KiB stored directly in Git rather than i...
PT-2026-107289
The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORT LOCAL PATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...
running-CVE-2024-32002-locally-for-tesing
Wir passen dies für den lokalen Gebrauch an wir folgen diesem Blogbeitrag, jedoch mit einigen wesentlichen Unterschieden https://amalmurali.me/posts/git-rce Funktionsweise 1. Ein bösartiges Repository gitrce enthält ein Submodul mit einem speziell präparierten Pfad. 2. Der Submodul-Pfad verwendet...
CVE-2026-20896
CVE-2026-20896 A imagem Docker oficial do Gitea até a versão 1.26.2 inclusive vem com REVERSEPROXYTRUSTEDPROXIES = na sua configuração padrão. Se você ativar o login por proxy reverso, esse curinga significa que todo IP de origem é tratado como um proxy confiável, então qualquer pessoa que consig...
CVE-2026-105640
Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth and by self-managed GitLab OAuth deployments where email confirmation is disabled, without verifying that the provider authenticated ownership of the address. An attacker can set ...
CVE-2026-104976
Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEAHOST only for its URL scheme and does not reject hosts that resolve to private or internal IP addresses. The four outbound requests in the Gitea OAuth flow are derived from this unvalidated host and do not call...
CVE-2026-105640
The open-source project management tool Plane is vulnerable to account takeover in versions prior to 1.4.0 . The root cause is that Plane trusts email addresses from Gitea OAuth and self-managed GitLab OAuth deployments where email confirmation is disabled, without verifying provider-authenticate...
EUVD-2026-92596
Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth and by self-managed GitLab OAuth deployments where email confirmation is disabled, without verifying that the provider authenticated ownership of the address. An attacker can set ...
CVE-2026-105640 Plane: Account Takeover via Unverified OAuth Email Match (Gitea, self-managed GitLab)
Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth and by self-managed GitLab OAuth deployments where email confirmation is disabled, without verifying that the provider authenticated ownership of the address. An attacker can set ...
CVE-2026-105640 Plane: Account Takeover via Unverified OAuth Email Match (Gitea, self-managed GitLab)
Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth and by self-managed GitLab OAuth deployments where email confirmation is disabled, without verifying that the provider authenticated ownership of the address. An attacker can set ...
CVE-2026-105640 Plane: Account Takeover via Unverified OAuth Email Match (Gitea, self-managed GitLab)
Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth and by self-managed GitLab OAuth deployments where email confirmation is disabled, without verifying that the provider authenticated ownership of the address. An attacker can set ...
CVE-2026-104976 Plane: SSRF in Gitea OAuth
Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEAHOST only for its URL scheme and does not reject hosts that resolve to private or internal IP addresses. The four outbound requests in the Gitea OAuth flow are derived from this unvalidated host and do not call...
CVE-2026-104976 Plane: SSRF in Gitea OAuth
Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEAHOST only for its URL scheme and does not reject hosts that resolve to private or internal IP addresses. The four outbound requests in the Gitea OAuth flow are derived from this unvalidated host and do not call...
CVE-2026-104976 Plane: SSRF in Gitea OAuth
Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEAHOST only for its URL scheme and does not reject hosts that resolve to private or internal IP addresses. The four outbound requests in the Gitea OAuth flow are derived from this unvalidated host and do not call...
CVE-2026-104976
The project management tool Plane is vulnerable to a Server-Side Request Forgery (SSRF) in versions prior to 1.4.0 . The application fails to reject hosts that resolve to private or internal IP addresses when validating the GITEA_HOST variable. Specifically, four outbound requests in the Gitea OA...
EUVD-2026-92533
Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEAHOST only for its URL scheme and does not reject hosts that resolve to private or internal IP addresses. The four outbound requests in the Gitea OAuth flow are derived from this unvalidated host and do not call...
cve-2026-20896-gitea-poc
Verificador de Bypass de Autenticação Docker Gitea CVE-2026-20896 Apenas para operações autorizadas de red team / pentest. Este repositório contém um verificador mínimo para o CVE-2026-20896, um bypass de autenticação em imagens oficiais do Gitea Docker até a versão 1.26.2 quando a autenticação p...