2043 matches found
GHSA-JHF3-XXHW-2WPP vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller, k9s, argo-workflows, zarf, pulumi-language-yaml, kubescape, osv-scanner, pulumi-kubernetes-operator, trivy, pulumi-language-dotnet, kargo, pulumi-language-java, src-fingerprint, teleport, nfpm, grype, gitaly, guac, nuclei, kaniko, zo...
ANT-2026-VN61PHA0 · gitea · IDOR
idor medium CVE-2026-58435 GHSA-rh79-75qm-gwjr Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Doyensec. ANT-2026-VN61PHA0: Gitea LFS Deploy-Ke...
Improper Authorization
code.gitea.io/gitea is vulnerable to improper authorization. The vulnerability is due to insufficient authorization checks when deleting releases, which allows an attacker to delete releases without proper permissions...
Improper Access Control
code.gitea.io/gitea is vulnerable to improper access control. The vulnerability is due to insufficient authorization checks, which allows an anonymous attacker to access private user projects...
Cross Site Scripting (XSS)
code.gitea.io/gitea is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper validation of URL schemes in links, which allows an attacker to inject malicious javascript: URLs and execute arbitrary scripts in a user's browser...
Information Disclosure
code.gitea.io/gitea is vulnerable to information disclosure. The vulnerability is due to improper exposure of user metadata through sortable fields such as last login time, which allows an attacker to infer users' login activity by manipulating the explore/users sort order...
Cross-Site Scripting (XSS)
code.gitea.io/gitea is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user input in the search input box used for creating tags and branches, where v-html is used instead of v-text, which allows an attacker to inject and execute malicious scripts in the...
Security update for gitea-tea (moderate)
openSUSE Security Update: Security update for gitea-tea Announcement ID: openSUSE-SU-2026:0073-1 Rating: moderate References: Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVE-2025-58190 SUSE:...
Security update for gitea-tea (moderate)
openSUSE Security Update: Security update for gitea-tea Announcement ID: openSUSE-SU-2026:0074-1 Rating: moderate References: Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVE-2025-58190 SUSE:...
openSUSE 16 Security Update : gitea-tea (openSUSE-SU-2026:20318-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20318-1 advisory. Changes in gitea-tea: - update to 0.12.0: New Features - Add tea actions commands for managing workflow runs and workflows in 880, 796 - Add tea...
OPENSUSE-SU-2026:20318-1 Security update for gitea-tea
This update for gitea-tea fixes the following issues: Changes in gitea-tea: - update to 0.12.0: New Features - Add tea actions commands for managing workflow runs and workflows in 880, 796 - Add tea api subcommand for arbitrary API calls not covered by existing commands in 879 - Add repository...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: argo-cd-fips, crossplane-fips, kubescape, grafana, snyk-cli, argo-workflows-fips, pulumi-language-dotnet, cloudbeat-fips, xeol-fips, argo-cd, crossplane-provider-aws-rds, gitlab-rails-ce-fips, tekton-pipelines-fips, zot, crossplane-provider-aws-memorydb,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: argo-cd-fips, crossplane-fips, kubescape, grafana, snyk-cli, argo-workflows-fips, pulumi-language-dotnet, cloudbeat-fips, xeol-fips, argo-cd, crossplane-provider-aws-rds, gitlab-rails-ce-fips, tekton-pipelines-fips, zot, crossplane-provider-aws-memorydb,...
ROS-20260224-73-0033
Vulnerability in gitea related to lack of protection for proprietary data. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information...
ROS-20260224-73-0028
Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...
ROS-20260224-73-0029
Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...
ROS-20260224-73-0026
Vulnerability in gitea related to access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...
ROS-20260224-73-0035
Vulnerability in gitea related to a flaw in the authorization mechanism. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...