2977 matches found
CVE-2026-58511
creationtimestamp| type| source ---|---|--- 2026-08-14 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/gitea-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...
CVE-2026-22555
A flaw was found in Gitea. An API Application Programming Interface endpoint responsible for forking repositories into an organization failed to properly check if a user had the necessary permissions to create repositories within that organization. This allowed a read-only organization member to...
GO-2025-3988 vulnerabilities
Vulnerabilities for packages: sftpgo, gitea-fips, gitea...
GO-2025-4261 vulnerabilities
Vulnerabilities for packages: gitea-fips...
GO-2022-0470 vulnerabilities
Vulnerabilities for packages: gitea-fips, gitness, grafana, gitea, mattermost-fips...
GO-2025-3988 vulnerabilities
Vulnerabilities for packages: gitea, sftpgo...
GO-2022-0470 vulnerabilities
Vulnerabilities for packages: gitea, gitness...
GO-2026-4961 vulnerabilities
Vulnerabilities for packages: pdfcpu, ollama, bento, mattermost, gitea, rclone, seaweedfs, kubescape...
GO-2026-5061 vulnerabilities
Vulnerabilities for packages: pdfcpu, bento, mattermost, ollama, mailpit, gitea, rclone, seaweedfs, kubescape...
GO-2025-3540 vulnerabilities
Vulnerabilities for packages: fluent-bit-plugin-loki, falcosidekick, authservice, kots, oauth2-proxy, gitea, atlantis, splunk-otel-collector...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, grype, melange, apko, flux-source-controller, kaniko, wolfictl, kubescape, scorecard, crossplane, task, pulumi-language-java, pulumi-language-dotnet, kots, pulumi-language-yaml, gitsign, skaffold, chezmoi, goreleaser, guac, argo-events,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: argo-cd, trufflehog, grype, melange, apko, flux-source-controller, kaniko, trivy-operator, kubescape, external-secrets-operator, teleport, wolfictl, scorecard, crossplane, witness, pulumi-language-java, gomplate, gitaly, pulumi-language-dotnet, steampipe, kots,...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, grype, melange, apko, flux-source-controller, kaniko, wolfictl, kubescape, scorecard, crossplane, task, pulumi-language-java, pulumi-language-dotnet, kots, pulumi-language-yaml, gitsign, skaffold, chezmoi, goreleaser, guac, argo-events,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: argo-cd, src, flux-kustomize-controller, grype, melange, crossplane-provider-azure-sql, docker, flux-source-controller, neuvector-sigstore-interface, scorecard, helm, step-issuer, steampipe, tw, crossplane-provider-aws-sns, cilium-cli, nfpm, argo-events, buildkitd,...
CVE-2026-56657
A flaw was found in Gitea. The SSH Key Parser component is vulnerable to a denial of service. A remote attacker could potentially exploit this by submitting a specially crafted SSH key, leading to the unavailability of the Gitea service. Mitigation Mitigation for this issue is either not availabl...
CVE-2026-59763
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...
CVE-2026-58508
Two SSRF vulnerabilities in Gitea migration/mirror DNS rebinding + missing re-validation...
CVE-2026-58435
Gitea LFS Deploy-Key Privilege Escalation...
CVE-2026-58432
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...