Exposure of Gitea

Development
127
exposure score
47
sites use
1
exploited
7
critical

CVEs

111 results
CVE-2026-109844MEDIUMGitea watched repositories API disclosure after access revocationEPSS 0.2%CVE-2026-96400MEDIUMGitea migration SSRF to reserved addresses through ALLOWED_DOMAINSEPSS 0.2%CVE-2026-119627MEDIUMGitea limited-visibility profile disclosure with public-only tokensEPSS 0.2%CVE-2026-97626MEDIUMGitea profile feed disclosure bypassing user visibilityEPSS 0.2%CVE-2026-110494MEDIUMGitea release attachment re-linking of issue attachmentsEPSS 0.2%CVE-2026-89182MEDIUMGitea push-to-create bypass of FORCE_PRIVATE policyEPSS 0.2%CVE-2026-105268MEDIUMGitea issue attachment API allows changing comment attachmentsEPSS 0.2%CVE-2026-119625MEDIUMGitea user and organization feed token scope bypassEPSS 0.2%CVE-2026-103667MEDIUMGitea container registry stored XSS through blob media typeEPSS 0.2%CVE-2026-70402MEDIUMGitea local code execution through writable Git hooksEPSS 0.2%CVE-2026-112887MEDIUMGitea Actions task token private repository enumerationEPSS 0.2%CVE-2026-97204LOWGitea label deletion across repository and organization IDsEPSS 0.2%CVE-2026-101029MEDIUMGitea migration and pull mirror SSRF through multi-answer DNSEPSS 0.2%CVE-2026-109553HIGHGitea SSH certificate principal impersonation of other usersEPSS 0.2%CVE-2026-113429MEDIUMGitea stored XSS through legacy Actions artifact Content-EncodingEPSS 0.2%CVE-2026-120263CRITICALGitea OAuth2 account auto-linking takeover through the sign-up formEPSS 0.2%CVE-2026-118504MEDIUMGitea issue changes on archived repositories through the APIEPSS 0.2%CVE-2026-118395HIGHGitea public-only token bypass in repository and organization creationEPSS 0.2%CVE-2026-114199MEDIUMGitea contribution heatmap private activity disclosure to public-only tokensEPSS 0.2%CVE-2026-117646MEDIUMGitea private repository listing to public-only tokens on profilesEPSS 0.2%