2977 matches found
GO-2026-6067 Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API in gitea.dev
Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API in gitea.dev...
GO-2026-6066 Gitea: Private Repository Existence Disclosure via go-get Meta Endpoint in gitea.dev
Gitea: Private Repository Existence Disclosure via go-get Meta Endpoint in gitea.dev...
GO-2026-6077 Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service in code.gitea.io/gitea
Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service in code.gitea.io/gitea...
GO-2026-6076 Gitea: Unauthorized Access to Labels of Private Organizations in code.gitea.io/gitea
Gitea: Unauthorized Access to Labels of Private Organizations in code.gitea.io/gitea...
PT-2026-65356
Gitea: Repository migration SSRF via multi-answer DNS allow-list bypass in gitea.dev...
PT-2026-65372
Gitea: SSRF via HTTP Redirect in Repository Migration in code.gitea.io/gitea...
ROS-20260727-73-0017
A vulnerability in Gitea related to a lack of protection for internal data. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to protected information...
PT-2026-65365
Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API in gitea.dev...
PT-2026-65370
Gitea LFS Deploy-Key Privilege Escalation in gitea.dev...
PT-2026-65378
Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private in code.gitea.io/gitea...
PT-2026-65360
Gitea: Private Repository Metadata Remains Accessible After Access Revocation in gitea.dev...
PT-2026-65358
Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write in code.gitea.io/gitea...
PT-2026-65379
Gitea: Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint in gitea.dev...
ROS-20260727-73-0019
A vulnerability in Gitea related to flaws in the authorization mechanism. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to sensitive information...
ROS-20260727-73-0018
A vulnerability in Gitea related to insufficient validation of incoming requests. Exploitation of this vulnerability could allow a remote attacker to carry out an SSRF attack...
PT-2026-65382
Gitea: Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access in gitea.dev...
PT-2026-65371
Gitea: API Fork Endpoint Authorization Bypass Allows Organization Members to Bypass Repository Creation Restrictions in code.gitea.io/gitea...
PT-2026-65366
Gitea: Private org member list leaked via /members API endpoint — incomplete fix for PR 38145 in gitea.dev...