code.gitea.io/gitea (Go)
Advisories
193
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 1.27.0 or later clears every advisory below that has a fix.
Upgrade commands
go
go get code.gitea.io/gitea@v1.27.0 && go mod tidyKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-rcr6-4jqh-j84m Gitea: Remote Code Execution via diffpatch Git Hook Installation Known exploited |
Critical EPSS 23.99% |
>= 1.17.0 | No fix yet |
| GHSA-fq2p-5p22-8g6j Gitea: Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints |
Medium EPSS 0.47% |
< 1.27.0 | 1.27.0 |
| GHSA-2wm4-vwp6-v7xc Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata |
High EPSS 0.39% |
< 1.27.0 | 1.27.0 |
| GHSA-3r5c-2xxx-h872 Gitea: Webhook Authorization Header Returned in Plaintext via API |
Low EPSS 0.39% |
< 1.27.0 | 1.27.0 |
| GHSA-frpw-3h2q-4jj6 Gitea: Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs |
Medium EPSS 0.41% |
< 1.27.0 | 1.27.0 |
| GHSA-q423-49rw-g9mh Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private |
Medium EPSS 0.33% |
< 1.27.0 | 1.27.0 |
| GHSA-2fcr-jfvc-vgg2 Gitea: Two SSRF findings |
High EPSS 0.40% |
< 1.27.0 | 1.27.0 |
| GHSA-fw57-jgch-pgf3 Gitea: ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests |
High EPSS 0.61% |
< 1.27.0 | 1.27.0 |
| GHSA-4xjf-493q-98p3 Gitea SSH Key Parser Denial of Service |
Medium EPSS 0.17% |
< 1.27.0 | 1.27.0 |
| GHSA-8p9h-49rc-qgxj Gitea: Repository Visibility Manipulation via Git Push Options |
High EPSS 0.34% |
< 1.27.0 | 1.27.0 |
| GHSA-vrhc-jjfc-m3m3 Gitea: OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009) |
High EPSS 0.41% |
< 1.27.0 | 1.27.0 |
| GHSA-rh79-75qm-gwjr Gitea LFS Deploy-Key Privilege Escalation |
Medium EPSS 0.29% |
< 1.27.0 | 1.27.0 |
| GHSA-m932-crvm-gcp5 Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service |
Low EPSS 0.46% |
< 1.27.0 | 1.27.0 |
| GHSA-mg4f-x9v4-6h2p Gitea: OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes |
Critical EPSS 0.51% |
< 1.27.0 | 1.27.0 |
| GHSA-j2w3-9c3r-g83q Gitea: Private Repository Metadata Remains Accessible After Access Revocation |
High EPSS 0.47% |
< 1.27.0 | 1.27.0 |
| GHSA-94v3-77j7-vm48 Gitea: Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override |
High EPSS 0.30% |
< 1.27.0 | 1.27.0 |
| GHSA-6cqf-375w-639g Gitea: RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698) |
Medium EPSS 0.36% |
< 1.27.0 | 1.27.0 |
| GHSA-wwqq-x6w4-frm2 Gitea: Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint |
Medium EPSS 0.53% |
< 1.27.0 | 1.27.0 |
| GHSA-pgqf-926r-548m Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API |
Low EPSS 0.37% |
< 1.27.0 | 1.27.0 |
| GHSA-cp3q-vrj2-ghhh Gitea: Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents |
Medium EPSS 0.36% |
< 1.27.0 | 1.27.0 |
| GHSA-xxjv-752h-3vp2 Gitea: Public-only repository tokens can update private PR head branches |
Critical EPSS 0.58% |
< 1.27.0 | 1.27.0 |
| GHSA-h2x6-g7q6-344v Gitea: Repository migration SSRF via multi-answer DNS allow-list bypass |
Medium EPSS 0.43% |
< 1.27.0 | 1.27.0 |
| GHSA-xmj7-xj85-hfc3 Gitea: SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL |
Medium EPSS 0.17% |
< 1.27.0 | 1.27.0 |
| GHSA-rjvx-x5h2-6px5 Gitea: API Fork Endpoint Authorization Bypass Allows Organization Members to Bypass Repository Creation Restrictions |
Medium | < 1.26.0 | 1.26.0 |
| GHSA-rjvx-x5h2-6px5 Gitea: API Fork Endpoint Authorization Bypass Allows Organization Members to Bypass Repository Creation Restrictions |
Medium | < 1.26.0 | 1.26.0 |
| GHSA-683j-3ff6-hh2x Gitea: Privilege Escalation via Access Token Scope Escalation in API |
Critical EPSS 0.83% |
< 1.27.0 | 1.27.0 |
| GHSA-6hm7-3pwj-22rm Gitea: Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload |
Medium EPSS 0.17% |
< 1.27.0 | 1.27.0 |
| GHSA-p4mj-98mv-xq26 Gitea: Private Repository Existence Disclosure via go-get Meta Endpoint |
Medium EPSS 0.38% |
< 1.27.0 | 1.27.0 |
| GHSA-6c6r-5xr4-cr5m Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content |
Medium EPSS 0.31% |
< 1.27.0 | 1.27.0 |
| GHSA-x77v-q46j-393g Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim |
Low EPSS 0.29% |
< 1.27.0 | 1.27.0 |
| GHSA-vxv2-8j6r-pcpg Gitea: OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation) |
Medium EPSS 0.33% |
< 1.27.0 | 1.27.0 |
| GHSA-9mq6-mqjj-c2c5 Gitea: Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads |
Medium EPSS 0.29% |
< 1.27.0 | 1.27.0 |
| GHSA-rgv6-xp99-6mgj Gitea Remember-Me Token Theft Not Invalidating Attacker Session |
Critical EPSS 0.48% |
< 1.27.0 | 1.27.0 |
| GHSA-q9pg-jj6x-j9p6 Gitea: draft release attachment disclosure via missing web authorization |
Medium EPSS 0.43% |
< 1.27.0 | 1.27.0 |
| GHSA-25gq-j9jx-43pg Gitea: Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939) |
Medium EPSS 0.46% |
< 1.27.0 | 1.27.0 |
| GHSA-7p4h-3gxq-x3h3 Gitea: Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118 |
Critical EPSS 0.53% |
< 1.27.0 | 1.27.0 |
| GHSA-w5pg-649r-p6gg Gitea: Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag |
High EPSS 0.53% |
< 1.27.0 | 1.27.0 |
| GHSA-w5pg-649r-p6gg Gitea: Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag |
High EPSS 0.53% |
all versions | No fix yet |
| GHSA-qf2f-qh6p-7v89 Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times` |
Medium EPSS 0.28% |
< 1.27.0 | 1.27.0 |
| GHSA-82f7-87hm-852x Gitea: Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration |
High EPSS 0.36% |
< 1.27.0 | 1.27.0 |
| GHSA-hg5r-vq93-9fv6 Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write |
Critical EPSS 0.23% |
>= 1.22.0, < 1.26.2 | 1.26.2 |
| GHSA-hg5r-vq93-9fv6 Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write |
Critical EPSS 0.23% |
>= 1.22.0, < 1.26.2 | 1.26.2 |
| GHSA-777r-4v59-6486 Gitea: Permanent Fork PR Workflow Approval Gate Bypass |
High EPSS 0.25% |
< 1.26.3 | 1.26.3 |
| GHSA-777r-4v59-6486 Gitea: Permanent Fork PR Workflow Approval Gate Bypass |
High EPSS 0.25% |
< 1.26.3 | 1.26.3 |
| GHSA-7wvc-rvp7-w99x Gitea: LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories |
High EPSS 0.39% |
>= 1.23.0, < 1.26.3 | 1.26.3 |
| GHSA-7wvc-rvp7-w99x Gitea: LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories |
High EPSS 0.39% |
>= 1.23.0, < 1.26.3 | 1.26.3 |
| GHSA-g9g6-qhrc-p3qc Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts |
Critical EPSS 0.43% |
< 1.26.4 | 1.26.4 |
| GHSA-g9g6-qhrc-p3qc Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts |
Critical EPSS 0.43% |
< 1.26.4 | 1.26.4 |
| GHSA-v96j-25gv-g2w9 Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service |
High EPSS 0.40% |
< 1.26.4 | 1.26.4 |
| GHSA-v96j-25gv-g2w9 Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service |
High EPSS 0.40% |
< 1.26.4 | 1.26.4 |
| GHSA-44qc-pgvp-wx7v Gitea: Notification API leaks private issue metadata after access revocation |
High EPSS 0.38% |
< 1.26.4 | 1.26.4 |
| GHSA-44qc-pgvp-wx7v Gitea: Notification API leaks private issue metadata after access revocation |
High EPSS 0.38% |
< 1.26.4 | 1.26.4 |
| GHSA-rqhx-647v-wx32 Gitea: SSRF via HTTP Redirect in Repository Migration |
Medium EPSS 0.31% |
< 1.26.4 | 1.26.4 |
| GHSA-rqhx-647v-wx32 Gitea: SSRF via HTTP Redirect in Repository Migration |
Medium EPSS 0.31% |
< 1.26.4 | 1.26.4 |
| GO-2026-6029 Gitea: Git LFS object reuse allows non-Code access to authorize private source objects |
High EPSS 0.32% |
< 1.26.3 | 1.26.3 |
| GHSA-7jvx-g65v-r899 Gitea release asset dumps permit path traversal through crafted names |
Medium EPSS 0.45% |
< 1.25.5 | 1.25.5 |
| GHSA-7jvx-g65v-r899 Gitea release asset dumps permit path traversal through crafted names |
Medium EPSS 0.45% |
< 1.25.5 | 1.25.5 |
| GHSA-vhq7-fwwh-7hjf Gitea pre-receive hook scanner errors allow branch-protection bypass |
Critical EPSS 0.64% |
< 1.26.0 | 1.26.0 |
| GHSA-vhq7-fwwh-7hjf Gitea pre-receive hook scanner errors allow branch-protection bypass |
Critical EPSS 0.64% |
< 1.26.0 | 1.26.0 |
| GHSA-v8f2-2ghq-9whv Gitea forwarded-proto validation allows canonical URL spoofing |
High EPSS 0.58% |
< 1.25.5 | 1.25.5 |
| GHSA-v8f2-2ghq-9whv Gitea forwarded-proto validation allows canonical URL spoofing |
High EPSS 0.58% |
< 1.25.5 | 1.25.5 |
| GHSA-649p-mmhf-85c7 Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write |
High EPSS 0.91% |
< 1.26.3 | 1.26.3 |
| GHSA-649p-mmhf-85c7 Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write |
High EPSS 0.91% |
< 1.26.3 | 1.26.3 |
| GHSA-8qw8-rq86-9pc2 Gitea has insufficient permission checks for Composer package source links |
High EPSS 1.39% |
< 1.26.2 | 1.26.2 |
| GHSA-8qw8-rq86-9pc2 Gitea has insufficient permission checks for Composer package source links |
High EPSS 1.39% |
< 1.26.2 | 1.26.2 |
| GHSA-3pww-vcvm-3gmj Gitea: API access token scope enforcement bypass on repository RSS/Atom feed endpoints leaks private repository commit data |
Medium EPSS 0.45% |
< 1.26.3 | 1.26.3 |
| GHSA-3pww-vcvm-3gmj Gitea: API access token scope enforcement bypass on repository RSS/Atom feed endpoints leaks private repository commit data |
Medium EPSS 0.45% |
< 1.26.3 | 1.26.3 |
| GHSA-x92v-f5gc-r34v Gitea draft releases and attachments are exposed without write permission |
High EPSS 0.45% |
< 1.25.5 | 1.25.5 |
| GHSA-x92v-f5gc-r34v Gitea draft releases and attachments are exposed without write permission |
High EPSS 0.45% |
< 1.25.5 | 1.25.5 |
| GHSA-4c8f-3m6h-m56r Gitea primary email ownership bypass allows cross-user email changes |
High EPSS 0.45% |
< 1.25.5 | 1.25.5 |
| GHSA-4c8f-3m6h-m56r Gitea primary email ownership bypass allows cross-user email changes |
High EPSS 0.45% |
< 1.25.5 | 1.25.5 |
| GHSA-h9c5-x7g8-4q7f Gitea git grep searches allow server resource exhaustion |
High EPSS 0.63% |
< 1.25.5 | 1.25.5 |
| GHSA-h9c5-x7g8-4q7f Gitea git grep searches allow server resource exhaustion |
High EPSS 0.63% |
< 1.25.5 | 1.25.5 |
| GHSA-rc56-rj3f-xggf Gitea LFS mirror operations bypass migration HTTP transport protections |
Critical EPSS 0.65% |
< 1.25.5 | 1.25.5 |
| GHSA-rc56-rj3f-xggf Gitea LFS mirror operations bypass migration HTTP transport protections |
Critical EPSS 0.65% |
< 1.25.5 | 1.25.5 |
| GHSA-m5ch-ppfx-xv3v Gitea OAuth2 PKCE S256 verifier bypass |
Critical EPSS 0.50% |
< 1.25.5 | 1.25.5 |
| GHSA-m5ch-ppfx-xv3v Gitea OAuth2 PKCE S256 verifier bypass |
Critical EPSS 0.50% |
< 1.25.5 | 1.25.5 |
| GHSA-5v69-g2m3-3hq3 Gitea OAuth2 authorization codes can be reused after expiry |
Critical EPSS 0.50% |
< 1.25.5 | 1.25.5 |
| GHSA-5v69-g2m3-3hq3 Gitea OAuth2 authorization codes can be reused after expiry |
Critical EPSS 0.50% |
< 1.25.5 | 1.25.5 |
| GHSA-qm72-8prh-g92x Gitea tracked-time deletion is not scoped to the requested issue |
Medium EPSS 0.39% |
< 1.25.5 | 1.25.5 |
| GHSA-qm72-8prh-g92x Gitea tracked-time deletion is not scoped to the requested issue |
Medium EPSS 0.39% |
< 1.25.5 | 1.25.5 |
| GHSA-h697-89cp-24q8 Gitea template repository generation follows unsafe filesystem paths |
Critical EPSS 0.56% |
< 1.25.5 | 1.25.5 |
| GHSA-h697-89cp-24q8 Gitea template repository generation follows unsafe filesystem paths |
Critical EPSS 0.56% |
< 1.25.5 | 1.25.5 |
| GHSA-37w2-86g3-h4qh Gitea organization permission APIs expose hidden membership and private organization data |
High EPSS 0.48% |
< 1.25.5 | 1.25.5 |
| GHSA-37w2-86g3-h4qh Gitea organization permission APIs expose hidden membership and private organization data |
High EPSS 0.48% |
< 1.25.5 | 1.25.5 |
| GHSA-v73x-hx65-6pf4 Gitea: Unauthorized Access to Labels of Private Organizations |
High EPSS 0.62% |
< 1.26.3 | 1.26.3 |
| GHSA-v73x-hx65-6pf4 Gitea: Unauthorized Access to Labels of Private Organizations |
High EPSS 0.62% |
< 1.26.3 | 1.26.3 |
| GHSA-47rq-xp99-92mx Gitea pull request branch permission checks allow unauthorized updates and rebases |
High EPSS 0.45% |
< 1.25.5 | 1.25.5 |
| GHSA-47rq-xp99-92mx Gitea pull request branch permission checks allow unauthorized updates and rebases |
High EPSS 0.45% |
< 1.25.5 | 1.25.5 |
| GHSA-wrf9-r3h7-7x5v Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private |
High EPSS 0.45% |
< 1.26.3 | 1.26.3 |
| GHSA-wrf9-r3h7-7x5v Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private |
High EPSS 0.45% |
< 1.26.3 | 1.26.3 |
| GHSA-2r5c-gw76-rh3w Gitea: Incomplete SSRF Protection in Webhook and Migration Allow-list Default Filter |
Critical EPSS 0.46% |
< 1.26.3 | 1.26.3 |
| GHSA-2r5c-gw76-rh3w Gitea: Incomplete SSRF Protection in Webhook and Migration Allow-list Default Filter |
Critical EPSS 0.46% |
< 1.26.3 | 1.26.3 |
| GHSA-922f-hfwp-p56f Gitea repository creation accepts insufficiently validated fields |
Critical EPSS 0.52% |
< 1.25.5 | 1.25.5 |
| GHSA-922f-hfwp-p56f Gitea repository creation accepts insufficiently validated fields |
Critical EPSS 0.52% |
< 1.25.5 | 1.25.5 |
| GHSA-fhq3-p242-2qpf Gitea exposes tracked time entries without repository authorization |
Medium EPSS 0.39% |
< 1.25.5 | 1.25.5 |
| GHSA-fhq3-p242-2qpf Gitea exposes tracked time entries without repository authorization |
Medium EPSS 0.39% |
< 1.25.5 | 1.25.5 |
| GHSA-f75j-4cw6-rmx4 Gitea Docker image: `REVERSE_PROXY_TRUSTED_PROXIES = *` default lets any source IP impersonate any user via `X-WEBAUTH-USER` |
Critical EPSS 2.76% |
< 1.26.3 | 1.26.3 |
| GHSA-f75j-4cw6-rmx4 Gitea Docker image: `REVERSE_PROXY_TRUSTED_PROXIES = *` default lets any source IP impersonate any user via `X-WEBAUTH-USER` |
Critical EPSS 2.76% |
< 1.26.3 | 1.26.3 |
| GHSA-gx3v-q759-g323 Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface |
High EPSS 0.49% |
>= 1.5.0, < 1.26.3 | 1.26.3 |
| GHSA-gx3v-q759-g323 Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface |
High EPSS 0.49% |
>= 1.5.0, < 1.26.3 | 1.26.3 |
| GO-2026-5448 Gitea: Open Redirect via redirect_to |
Medium EPSS 0.30% |
< 1.26.0 | 1.26.0 |
| GHSA-9cpj-qc93-vw8v Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer |
High EPSS 0.41% |
>= 1.25.0, < 1.26.0 | 1.26.0 |
| GHSA-9cpj-qc93-vw8v Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer |
High EPSS 0.41% |
>= 1.25.0, < 1.26.0 | 1.26.0 |
| GHSA-wrr5-99h5-gq57 Gitea: Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes |
High EPSS 0.45% |
>= 1.22.3, < 1.26.2 | 1.26.2 |
| GHSA-wrr5-99h5-gq57 Gitea: Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes |
High EPSS 0.45% |
>= 1.22.3, < 1.26.2 | 1.26.2 |
| GHSA-fhx7-m96w-mv29 Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration |
High EPSS 0.39% |
< 1.26.0 | 1.26.0 |
| GHSA-fhx7-m96w-mv29 Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration |
High EPSS 0.39% |
< 1.26.0 | 1.26.0 |
| GHSA-cr4g-f395-h25h Gitea: Token scope bypass on web archive download endpoint |
Critical EPSS 0.59% |
< 1.26.2 | 1.26.2 |
| GHSA-cr4g-f395-h25h Gitea: Token scope bypass on web archive download endpoint |
Critical EPSS 0.59% |
< 1.26.2 | 1.26.2 |
| GHSA-3fwp-p5rj-2pxf Gitea: Missing repository-unit authorization on issue-template API endpoints |
Medium EPSS 0.35% |
< 1.26.2 | 1.26.2 |
| GHSA-3fwp-p5rj-2pxf Gitea: Missing repository-unit authorization on issue-template API endpoints |
Medium EPSS 0.35% |
< 1.26.2 | 1.26.2 |
| GHSA-8629-vc8r-5p58 Gitea: Incomplete CVE-2025-68941 fix: /user/orgs missing checkTokenPublicOnly + switch-case logic flaw |
Medium EPSS 0.39% |
< 1.26.2 | 1.26.2 |
| GHSA-8629-vc8r-5p58 Gitea: Incomplete CVE-2025-68941 fix: /user/orgs missing checkTokenPublicOnly + switch-case logic flaw |
Medium EPSS 0.39% |
< 1.26.2 | 1.26.2 |
| GHSA-mm7c-rhg6-qr4r Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo |
High EPSS 0.36% |
< 1.26.2 | 1.26.2 |
| GHSA-mm7c-rhg6-qr4r Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo |
High EPSS 0.36% |
< 1.26.2 | 1.26.2 |
| GHSA-9r5x-wg6m-x2rc Gitea: OAuth2 access token scope enforcement bypass via HTTP Basic authentication |
High EPSS 0.55% |
< 1.26.2 | 1.26.2 |
| GHSA-9r5x-wg6m-x2rc Gitea: OAuth2 access token scope enforcement bypass via HTTP Basic authentication |
High EPSS 0.55% |
< 1.26.2 | 1.26.2 |
| GHSA-cc8w-r4qh-3v65 Gitea: Git Smart HTTP Skips Repository Token Scopes for Bearer Tokens |
High EPSS 0.43% |
< 1.26.2 | 1.26.2 |
| GHSA-cc8w-r4qh-3v65 Gitea: Git Smart HTTP Skips Repository Token Scopes for Bearer Tokens |
High EPSS 0.43% |
< 1.26.2 | 1.26.2 |
| GHSA-3m6q-h5gj-7mrw Gitea has insecure default SSH settings |
Medium | < 1.25.0 | 1.25.0 |
| GHSA-3m6q-h5gj-7mrw Gitea has insecure default SSH settings |
Medium | < 1.25.0 | 1.25.0 |
| GO-2026-4364 Gitea does not properly validate repository ownership when linking attachments to releases |
Critical EPSS 0.46% |
< 1.25.4 | 1.25.4 |
| GO-2026-4369 Gitea does not properly validate ownership when toggling OpenID URI visibility |
Medium EPSS 0.30% |
< 1.25.4 | 1.25.4 |
| GO-2026-4363 Gitea does not properly validate repository ownership when deleting Git LFS locks |
Critical EPSS 0.46% |
< 1.25.4 | 1.25.4 |
| GO-2026-4366 Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface |
Medium EPSS 0.33% |
< 1.25.4 | 1.25.4 |
| GO-2026-4368 Gitea improperly exposes issue titles and repository names through previously started stopwatches |
Medium EPSS 0.36% |
< 1.25.4 | 1.25.4 |
| GO-2026-4362 Gitea improperly exposes issue and pull request titles |
Medium EPSS 0.41% |
< 1.25.4 | 1.25.4 |
| GO-2026-4370 Gitea does not properly validate project ownership in organization project operations |
Critical EPSS 0.43% |
< 1.25.4 | 1.25.4 |
| GHSA-hgr3-x44x-33hx Gitea has improper access control for uploaded attachments |
High EPSS 0.43% |
< 1.25.4 | 1.25.4 |
| GHSA-hgr3-x44x-33hx Gitea has improper access control for uploaded attachments |
High EPSS 0.43% |
< 1.25.4 | 1.25.4 |
| GHSA-8fwc-qjw5-rvgp Gitea may send release notification emails for private repositories to users whose access has been revoked |
Low EPSS 0.27% |
< 1.25.4 | 1.25.4 |
| GHSA-8fwc-qjw5-rvgp Gitea may send release notification emails for private repositories to users whose access has been revoked |
Low EPSS 0.27% |
< 1.25.4 | 1.25.4 |
| GHSA-pc73-rj2c-wvf9 Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists |
Medium EPSS 0.39% |
< 1.25.2 | 1.25.2 |
| GHSA-pc73-rj2c-wvf9 Gitea's /api/v1/user endpoint has different responses for failed authentication depending on whether a username exists |
Medium EPSS 0.39% |
< 1.25.2 | 1.25.2 |
| GHSA-hq57-c72x-4774 Gitea vulnerable to Cross-site Scripting |
Medium EPSS 0.25% |
< 1.20.1 | 1.20.1 |
| GHSA-hq57-c72x-4774 Gitea vulnerable to Cross-site Scripting |
Medium EPSS 0.25% |
< 1.20.1 | 1.20.1 |
| GHSA-7xq4-mwcp-q8fx Gitea: anonymous user can visit private user's project |
Medium EPSS 0.36% |
< 1.21.2 | 1.21.2 |
| GHSA-7xq4-mwcp-q8fx Gitea: anonymous user can visit private user's project |
Medium EPSS 0.36% |
< 1.21.2 | 1.21.2 |
| GHSA-f85h-c7m6-cfpm Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries |
Medium EPSS 0.28% |
< 1.22.2 | 1.22.2 |
| GHSA-f85h-c7m6-cfpm Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries |
Medium EPSS 0.28% |
< 1.22.2 | 1.22.2 |
| GHSA-jhx5-4vr4-f327 Gitea inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order |
Medium EPSS 0.36% |
< 1.21.8 | 1.21.8 |
| GHSA-jhx5-4vr4-f327 Gitea inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order |
Medium EPSS 0.36% |
< 1.21.8 | 1.21.8 |
| GHSA-898p-hh3p-hf9r Gitea allows XSS because the search input box (for creating tags and branches) is v-html instead of v-text |
Medium EPSS 0.25% |
< 1.22.2 | 1.22.2 |
| GHSA-898p-hh3p-hf9r Gitea allows XSS because the search input box (for creating tags and branches) is v-html instead of v-text |
Medium EPSS 0.25% |
< 1.22.2 | 1.22.2 |
| GHSA-xfq3-qj7j-4565 Gitea mishandles access to a private resource upon receiving an API token with scope limited to public resources |
Medium EPSS 0.26% |
< 1.22.3 | 1.22.3 |
| GHSA-xfq3-qj7j-4565 Gitea mishandles access to a private resource upon receiving an API token with scope limited to public resources |
Medium EPSS 0.26% |
< 1.22.3 | 1.22.3 |
| GHSA-rrcw-5rjv-vj26 Gitea doesn't adequately enforce branch deletion permissions after merging a pull request. |
Medium EPSS 0.27% |
< 1.22.5 | 1.22.5 |
| GHSA-rrcw-5rjv-vj26 Gitea doesn't adequately enforce branch deletion permissions after merging a pull request. |
Medium EPSS 0.27% |
< 1.22.5 | 1.22.5 |
| GHSA-263q-5cv3-xq9g Gitea allows attackers to add attachments with forbidden file extensions |
Medium EPSS 0.33% |
all versions | No fix yet |
| GHSA-263q-5cv3-xq9g Gitea allows attackers to add attachments with forbidden file extensions |
Medium EPSS 0.33% |
all versions | No fix yet |
| GHSA-cm54-pfmc-xrwx Gitea mishandles authorization for deletion of releases |
Medium EPSS 0.38% |
< 1.25.2 | 1.25.2 |
| GHSA-cm54-pfmc-xrwx Gitea mishandles authorization for deletion of releases |
Medium EPSS 0.38% |
< 1.25.2 | 1.25.2 |
| GHSA-4h4p-553m-46qh Gitea Cross-site Scripting Vulnerability |
Critical EPSS 32.97% |
< 1.22.1 | 1.22.1 |
| GHSA-4h4p-553m-46qh Gitea Cross-site Scripting Vulnerability |
Critical EPSS 32.97% |
< 1.22.1 | 1.22.1 |
| GO-2024-2757 Buffer Overflow in gitea |
High EPSS 1.81% |
>= 1.9.0, < 1.13.2 | 1.13.2 |
| GHSA-3h6c-c475-jm7v Arbitrary Code Execution in Gitea |
High EPSS 95.43% |
>= 1.1.0, < 1.12.6 | 1.12.6 |
| GHSA-8j3v-68w3-3848 Gitea erroneous repo clones |
Medium EPSS 0.56% |
< 1.17.2 | 1.17.2 |
| GHSA-8j3v-68w3-3848 Gitea erroneous repo clones |
Medium EPSS 0.56% |
< 1.17.2 | 1.17.2 |
| GHSA-cf6v-9j57-v6r6 code.gitea.io/gitea Open Redirect vulnerability |
Medium EPSS 0.48% |
< 1.19.4 | 1.19.4 |
| GHSA-cf6v-9j57-v6r6 code.gitea.io/gitea Open Redirect vulnerability |
Medium EPSS 0.48% |
< 1.19.4 | 1.19.4 |
| GO-2022-1065 Gitea vulnerable to Argument Injection |
Critical EPSS 1.40% |
< 1.17.3 | 1.17.3 |
| GHSA-fhv8-m4j4-cww2 Gitea allowed assignment of private issues |
Medium EPSS 0.89% |
< 1.16.9 | 1.16.9 |
| GHSA-fhv8-m4j4-cww2 Gitea allowed assignment of private issues |
Medium EPSS 0.89% |
< 1.16.9 | 1.16.9 |
| GHSA-ph3w-2843-72mx Stored Cross-site Scripting in gitea |
Medium EPSS 0.80% |
< 1.16.9 | 1.16.9 |
| GHSA-ph3w-2843-72mx Stored Cross-site Scripting in gitea |
Medium EPSS 0.80% |
< 1.16.9 | 1.16.9 |
| GHSA-5rh7-6gfj-mc87 Gitea XSS Vulnerability |
Medium EPSS 0.84% |
< 1.7.1 | 1.7.1 |
| GHSA-5rh7-6gfj-mc87 Gitea XSS Vulnerability |
Medium EPSS 0.84% |
< 1.7.1 | 1.7.1 |
| GHSA-hqx2-j33x-9fc4 Gitea XSS Vulnerability in Repository Description |
Medium EPSS 0.85% |
>= 1.7.2, < 1.7.4 | 1.7.4 |
| GHSA-3393-r4p5-vhqh Gitea Allows 1FA Even for 2FA-Enrolled Accounts |
Critical EPSS 1.77% |
< 1.8.0 | 1.8.0 |
| GHSA-p5f9-c9j9-g8qx Shell command injection in gitea |
High EPSS 87.93% |
< 1.16.7 | 1.16.7 |
| GHSA-p5f9-c9j9-g8qx Shell command injection in gitea |
High EPSS 87.93% |
< 1.16.7 | 1.16.7 |
| GHSA-fg3x-rwq9-74cw Gogs and Gitea SSRF Vulnerability |
High EPSS 2.12% |
< 1.16.0-rc1 | 1.16.0-rc1 |
| GHSA-fg3x-rwq9-74cw Gogs and Gitea SSRF Vulnerability |
High EPSS 2.12% |
< 1.16.0-rc1 | 1.16.0-rc1 |
| GHSA-j99q-rwp6-498g Gitea Arbitrary File Delete Vulnerability |
Medium EPSS 1.11% |
< 1.6.3 | 1.6.3 |
| GHSA-g7p7-x6w7-w6qg Arbitrary file deletion in gitea |
High EPSS 1.04% |
< 1.16.4 | 1.16.4 |
| GHSA-g7p7-x6w7-w6qg Arbitrary file deletion in gitea |
High EPSS 1.04% |
< 1.16.4 | 1.16.4 |
| GHSA-4rqq-rxvc-v2rc Gitea Open Redirect |
Medium EPSS 53.18% |
< 1.16.5 | 1.16.5 |
| GHSA-4rqq-rxvc-v2rc Gitea Open Redirect |
Medium EPSS 53.18% |
< 1.16.5 | 1.16.5 |
| GHSA-h3q4-vmw4-cpr5 Path Traversal in Gitea |
Medium EPSS 1.49% |
< 1.13.6 | 1.13.6 |
| GHSA-h3q4-vmw4-cpr5 Path Traversal in Gitea |
Medium EPSS 1.49% |
< 1.13.6 | 1.13.6 |
| GHSA-jr9c-h74f-2v28 Gitea Missing Authorization vulnerability |
High EPSS 0.85% |
< 1.16.4 | 1.16.4 |
| GHSA-jr9c-h74f-2v28 Gitea Missing Authorization vulnerability |
High EPSS 0.85% |
< 1.16.4 | 1.16.4 |
| GHSA-hf6f-jq25-8gq9 Gitea Remote Code Execution (RCE) |
Critical EPSS 3.04% |
< 1.5.2 | 1.5.2 |
| GHSA-hf6f-jq25-8gq9 Gitea Remote Code Execution (RCE) |
Critical EPSS 3.04% |
< 1.5.2 | 1.5.2 |
| GO-2022-0830 Denial of Service in Gitea |
High EPSS 1.99% |
< 1.12.0 | 1.12.0 |
| GHSA-hfmf-q69j-6m5p Reuse of one time passwords allowed in Gitea |
Critical EPSS 1.44% |
< 1.5.0 | 1.5.0 |
| GHSA-hfmf-q69j-6m5p Reuse of one time passwords allowed in Gitea |
Critical EPSS 1.44% |
< 1.5.0 | 1.5.0 |
| GHSA-pg38-r834-g45j Improper Privilege Management in Gitea |
Critical EPSS 1.45% |
< 1.6.0 | 1.6.0 |
| GHSA-pg38-r834-g45j Improper Privilege Management in Gitea |
Critical EPSS 1.45% |
< 1.6.0 | 1.6.0 |
| GO-2022-0310 Capture-replay in Gitea |
Critical EPSS 2.14% |
< 1.11.2 | 1.11.2 |
| GHSA-g95p-88p4-76cm Cross-site Scripting in Gitea |
Medium EPSS 8.76% |
< 1.13.4 | 1.13.4 |
| GHSA-g95p-88p4-76cm Cross-site Scripting in Gitea |
Medium EPSS 8.76% |
< 1.13.4 | 1.13.4 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor