2953 matches found
CVE-2026-58435 Gitea LFS Deploy-Key Privilege Escalation
Gitea LFS Deploy-Key Privilege Escalation...
EUVD-2026-58162
Gitea LFS Deploy-Key Privilege Escalation...
CVE-2026-58435 Gitea LFS Deploy-Key Privilege Escalation
Gitea LFS Deploy-Key Privilege Escalation...
CVE-2026-58432
The Gitea application (code.gitea.io/gitea) is vulnerable to Missing Authorization and Authorization Bypass issues. These flaws can be triggered through a user-controlled key or incorrect permission assignments for critical resources, potentially leading to the exposure of sensitive information t...
EUVD-2026-58159
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...
CVE-2026-58432 Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...
CVE-2026-58432 Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...
CVE-2026-58432 Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...
EUVD-2026-58150
Two SSRF findings in Gitea 1.26.2...
CVE-2026-58314 Two SSRF findings in Gitea 1.26.2
Two SSRF findings in Gitea 1.26.2...
CVE-2026-58314 Two SSRF findings in Gitea 1.26.2
Two SSRF findings in Gitea 1.26.2...
CVE-2026-58314
The Git repository management system Gitea (specifically version 1.26.2 ) is vulnerable to Server-Side Request Forgery (SSRF) due to incorrect calculations in the *HostMatchList.checkIP() function within modules/hostmatcher/hostmatcher.go and the RedirectURL() function in modules/auth/openid/open...
CVE-2026-58314 Two SSRF findings in Gitea 1.26.2
Two SSRF findings in Gitea 1.26.2...
CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
EUVD-2026-58144
Gitea SSH Key Parser Denial of Service...
CVE-2026-56657 Gitea SSH Key Parser Denial of Service
Gitea SSH Key Parser Denial of Service...
CVE-2026-56657
The Git repository management system Gitea contains a vulnerability in the parseKeyString() function within the models/asymkey/ssh_key_parse.go file. Due to access control deficiencies, a remote attacker could submit a specially crafted SSH key to trigger a denial of service , potentially leading...
CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
CVE-2026-56750
The Gitea Git service is affected by a vulnerability where Remember-Me tokens can be stolen without invalidating the attacker's session. This flaw relates to improper access control and session management. The vulnerability was addressed in Gitea version 1.27.0 . Remediation is available via the ...