GO
Product
Gitea Open Source Git Server
96
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 36Medium 34Low 5
Watch
Add Gitea Open Source Git Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-0798 | 3.5 | Jan 22 | Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocation Affected: through 1.25.3 |
| CVE-2026-23603 | 3.1 | Aug 13 | Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim Affected: through 1.26.4 |
| CVE-2026-58511 | 2.7 | Aug 13 | Webhook Authorization Header Returned in Plaintext via API Affected: through 1.26.4 |
| CVE-2026-58445 | 2.7 | Aug 13 | Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API Affected: through 1.26.4 |
| CVE-2026-55984 | 2.7 | Aug 13 | Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service Affected: through 1.26.4 |
Showing 5