2953 matches found
CVE-2026-56750
The Gitea Git service is affected by a vulnerability where Remember-Me tokens can be stolen without invalidating the attacker's session. This flaw relates to improper access control and session management. The vulnerability was addressed in Gitea version 1.27.0 . Remediation is available via the ...
CVE-2026-56750 Gitea Remember-Me Token Theft Not Invalidating Attacker Session
Gitea Remember-Me Token Theft Not Invalidating Attacker Session...
CVE-2026-56657 Gitea SSH Key Parser Denial of Service
Gitea SSH Key Parser Denial of Service...
CLEANSTART-2026-YI59826 Security fixes in gitea 1.26.4-r1
Package gitea version 1.26.4-r1 fixes 9 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-56852, CVE-2026-71556, CVE-2026-71557, ghsa-259r-337f-4rfw...
CLEANSTART-2026-EX26301 Security fixes in gitea 1.27.0-r0
Package gitea version 1.27.0-r0 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...
CLEANSTART-2026-UB06398 Security fixes in gitea 1.26.4-r0
Package gitea version 1.26.4-r0 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...
Gitea 1.22.1-1.27.0 - Unauthenticated Arbitrary File Read
Gitea versions 1.22.1 through 1.27.0 initialize the go-org markup renderer without replacing its default ReadFile callback. An unauthenticated attacker can submit Org-mode markup containing an +INCLUDE directive with an absolute path to the repository markup endpoint of any public repository,...
ROS-20260813-73-0025
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260813-73-0012
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
PT-2026-71702
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Two Server-Side Request Forgery SSRF issues exist in the migration and mirror functions. These involve DNS rebinding and a lack of re-validation, which could allow an attacker to induce the...
ROS-20260813-73-0044
The vulnerability in Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...
ROS-20260813-73-0019
The vulnerability in Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...
ROS-20260813-73-0031
The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...
ROS-20260813-73-0013
The vulnerability in Gitea is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260813-73-0022
The vulnerability in Gitea is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-85872
Package gitea version 1.27.0-r0 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...
ROS-20260813-73-0032
The vulnerability in Gitea relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability allows a malicious actor to cause service failures through specially created IPv6 traffic...
ROS-20260813-73-0004
The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...
