Vulnerabilities in Gitea
210 resultsCVE-2026-28705MEDIUMGitea repository dumps write release assets using unsafe path namesEPSS 0.5%CVE-2026-24690HIGHGitea pull-request branch updates use insufficient permission checksEPSS 0.5%CVE-2026-24451HIGHGitea fork synchronization can expose private parent repository dataEPSS 0.4%CVE-2026-24791HIGHPublic-only tokens bypass private-resource restrictions on `/api/v1/user` self routesEPSS 0.4%CVE-2026-73535HIGHGitea second-factor bypass through OpenID identity linkingEPSS 0.4%CVE-2026-58053CRITICALGitea act_runner - Container Hardening Bypass via Workflow Container OptionsEPSS 0.4%CVE-2026-63792MEDIUMGitea private reusable workflow disclosure to fork runsEPSS 0.4%CVE-2026-20736HIGHGitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership CheckEPSS 0.4%CVE-2026-58432MEDIUMMissing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/giteaEPSS 0.4%CVE-2026-58422CRITICALImproper authorization on OAuth sign-in callback silently re-enables administrator-disabled accountsEPSS 0.4%CVE-2026-20750CRITICALGitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR)EPSS 0.4%CVE-2026-28744HIGHGitea Git smart HTTP bypasses repository token scopes for bearer tokensEPSS 0.4%CVE-2026-66877HIGHGitea fork workflow approval bypass through concurrency cancellationEPSS 0.4%CVE-2026-58442MEDIUMRepository migration SSRF via multi-answer DNS allow-list bypassEPSS 0.4%CVE-2026-24059MEDIUMGitea runner registration-token GET endpoint performs a write under a read-only token scopeEPSS 0.4%CVE-2026-55987HIGHOAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009)EPSS 0.4%CVE-2026-28737HIGHGitea 3D file viewer allows stored XSS through glTF extensionsRequiredEPSS 0.4%CVE-2026-57897MEDIUMCross-Repo Information Disclosure via Org-Level Actions Run/Job APIsEPSS 0.4%CVE-2026-25946MEDIUMGitea OpenID discovery server-side request forgeryEPSS 0.4%CVE-2026-20800MEDIUMNotification API Leaks Private Repository Issue Titles After Collaborator Permission RevocationEPSS 0.4%