Exposure of Gitea

Development
135
exposure score
47
sites use
1
exploited
10
critical

CVEs

111 results
CVE-2026-107618HIGHGitea cross-site request forgery on repository topicsEPSS 0.2%CVE-2026-116289CRITICALGitea public-only token bypass through Actions runner registrationEPSS 0.1%CVE-2026-117685CRITICALGitea public-only package token access to private OCI blobsEPSS 0.1%CVE-2026-119533HIGHGitea private pull request disclosure on project boardsEPSS 0.1%CVE-2026-119441HIGHGitea public-only token bypass on bulk organization repository deletionEPSS 0.1%CVE-2026-117635MEDIUMGitea admin API public-only token scope bypassEPSS 0.1%CVE-2026-118386MEDIUMGitea Actions fork workflow trust through pull request review commitEPSS 0.1%CVE-2026-118394MEDIUMGitea OAuth2 userinfo private group disclosure to public-only tokensEPSS 0.1%CVE-2026-86684HIGHGitea push mirror local path check uses the repository ownerEPSS 0.1%CVE-2026-104627MEDIUMGitea OpenID account linking without session bindingEPSS 0.1%CVE-2026-116474MEDIUMGitea Actions job token spoofing of instance-signed commitsEPSS 0.1%