Vulnerabilities in Gitea

210 results
CVE-2026-28699HIGHGitea Basic Auth bypasses OAuth2 access token scopesEPSS 0.6%CVE-2026-62925MEDIUMGitea Alpine package parsing memory exhaustionEPSS 0.5%CVE-2026-63021MEDIUMGitea Swift package manifest memory exhaustionEPSS 0.5%CVE-2026-60018MEDIUMGitea OneDev migration denial of serviceEPSS 0.5%CVE-2026-60021MEDIUMGitea GitLab migration denial of serviceEPSS 0.5%CVE-2026-73802HIGHGitea Runner host isolation bypass through container optionsEPSS 0.5%CVE-2026-73800HIGHGitea reusable workflow secret exposure in pull_request_targetEPSS 0.5%CVE-2026-42931MEDIUMDenial of Service via Unbounded io.ReadAll in NPM Package Tag EndpointEPSS 0.5%CVE-2026-56443CRITICALToken public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118EPSS 0.5%CVE-2026-58439HIGHBranch Protection Bypass via PR Retargeting Preserves Stale `official` Approval FlagEPSS 0.5%CVE-2026-22547CRITICALGitea repository creation accepts invalid field valuesEPSS 0.5%CVE-2026-58433CRITICALTeam-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization settingEPSS 0.5%CVE-2026-55982CRITICALOIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token ScopesEPSS 0.5%CVE-2026-26247CRITICALGitea OAuth2 PKCE S256 challenges are not enforced during token exchangeEPSS 0.5%CVE-2026-26232CRITICALGitea OAuth2 authorization codes lack expiry and reuse enforcementEPSS 0.5%CVE-2026-20779HIGHGitea TOTP single-use enforcement defect allows OTP replayEPSS 0.5%CVE-2026-71184HIGHGitea fork workflow approval bypass through review eventsEPSS 0.5%CVE-2026-58440MEDIUMWebhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content (incomplete revocation cleanup in `DeleteCollaboration`)EPSS 0.5%CVE-2026-25712HIGHGitea organization permission APIs expose private visibility informationEPSS 0.5%CVE-2026-58508CRITICALTwo SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)EPSS 0.5%