PT-2026-65371

Gitea: API Fork Endpoint Authorization Bypass Allows Organization Members to Bypass Repository Creation Restrictions in code.gitea.io/gitea...

PT-2026-65372

Gitea: SSRF via HTTP Redirect in Repository Migration in code.gitea.io/gitea...

PT-2026-65366

Gitea: Private org member list leaked via /members API endpoint — incomplete fix for PR 38145 in gitea.dev...

PT-2026-65362

Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service in gitea.dev...

PT-2026-65373

Gitea: Unauthorized Access to Labels of Private Organizations in code.gitea.io/gitea...

PT-2026-65376

Gitea: OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation in gitea.dev...

PT-2026-65381

Gitea: SSRF in restore-repo via unsanitized pull request.yml Head.CloneURL in gitea.dev...

PT-2026-65361

Gitea: REST API exposes organization membership of private organizations to public in gitea.dev...

PT-2026-65367

Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private in gitea.dev...

PT-2026-65357

Gitea: Public-only API token restriction is not enforced on team API routes in gitea.dev...

PT-2026-65380

Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim in gitea.dev...

PT-2026-65368

Gitea: draft release attachment disclosure via missing web authorization in gitea.dev...

PT-2026-65369

Gitea Remember-Me Token Theft Not Invalidating Attacker Session in gitea.dev...

PT-2026-65377

Gitea: Branch Protection Bypass via PR Retargeting Preserves Stale official Approval Flag in go-gitea/gitea. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

PT-2026-65364

Gitea: Private Repository Existence Disclosure via go-get Meta Endpoint in gitea.dev...

PT-2026-65374

Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service in code.gitea.io/gitea...

Insufficient Session Expiration

code.gitea.io/gitea is vulnerable to Insufficient Session Expiration. The vulnerability is due to improper invalidation of compromised Remember-Me session tokens, which allows an attacker to maintain unauthorized, persistent access to a user's account by reusing a stolen token even after the...

GO-2026-6054 Gitea: Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs in gitea.dev

Gitea: Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs in gitea.dev...

GO-2026-6034 Gitea: Privilege Escalation via Access Token Scope Escalation in API in gitea.dev

Gitea: Privilege Escalation via Access Token Scope Escalation in API in gitea.dev...

GO-2026-6055 Gitea: ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests in gitea.dev

Gitea: ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests in gitea.dev...