Vulnerabilities in Gitea
210 resultsCVE-2026-58419HIGHNotification API leaks private issue metadata after access revocationEPSS 0.4%CVE-2026-105267HIGHGitea tag delete route deletes releases without release permissionEPSS 0.4%CVE-2026-59765HIGHSSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataEPSS 0.4%CVE-2026-67577MEDIUMGitea restricted-user activity and heatmap disclosureEPSS 0.4%CVE-2026-66853MEDIUMGitea restricted-user organization metadata disclosureEPSS 0.4%CVE-2026-66849MEDIUMGitea restricted-user package visibility bypassEPSS 0.4%CVE-2026-60008LOWGitea Jupyter notebook UI redress through CSS class injectionEPSS 0.4%CVE-2026-78433MEDIUMGitea private attachment disclosure through repository mismatchEPSS 0.4%CVE-2026-70357HIGHGitea repository migration SSRF through DNS rebindingEPSS 0.4%CVE-2026-73130MEDIUMGitea repository initialization resource exhaustionEPSS 0.4%CVE-2026-58445LOWCross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel APIEPSS 0.4%CVE-2026-20883MEDIUMGitea Stopwatch API Missing Authorization Check Leads to Post-Revocation Information DisclosureEPSS 0.4%CVE-2026-73135MEDIUMGitea hidden-owner repository listing disclosureEPSS 0.4%CVE-2026-26231HIGHGitea maintainer-edit permissions allow unauthorized commits to readable repositoriesEPSS 0.4%CVE-2026-58444MEDIUMPersonal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contentsEPSS 0.4%CVE-2026-50105MEDIUMRSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)EPSS 0.4%CVE-2026-57894HIGHRepository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository ExfiltrationEPSS 0.4%CVE-2025-68945MEDIUMIn Gitea before 1.21.2, an anonymous user can visit a private user's project.EPSS 0.4%CVE-2025-68943MEDIUMGitea before 1.21.8 inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order.EPSS 0.4%CVE-2026-101023CRITICALGitea OAuth2 refresh token grant accepts access tokensEPSS 0.4%