GI
Product
Gitea
On CISA KEVExploited in the wild
131
CVEs
1
On KEV
9.8
Max CVSS
77
New 30D
Severity mix
Critical 17High 35Medium 75Low 3
Watch
Add Gitea to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60008 | 3.5 | Oct 14 | Gitea Jupyter notebook UI redress through CSS class injection Affected: 1.27.0 through 1.27.1 |
| CVE-2026-0798 | 3.5 | Jan 22 | Gitea may send release notification emails for private repositories to users whose access has been revoked Affected: before 1.25.4 |
| CVE-2026-97204 | 3.1 | Oct 18 | Gitea label deletion across repository and organization IDs Affected: through 28.1.0 |
Showing 3