Gitea Gitea Open Source Git Server

• CVE-2026-58422 Critical 9.8 Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts 0.4%
• CVE-2026-58421 High 7.5 Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service 0.4%
• CVE-2026-58419 High 7.5 Notification API leaks private issue metadata after access revocation 0.4%
• CVE-2026-58418 Medium 6.5 SSRF via HTTP Redirect in Repository Migration 0.3%
• CVE-2026-28744 High 8.1 Gitea Git smart HTTP bypasses repository token scopes for bearer tokens 0.4%
• CVE-2026-28740 High 7.1 Gitea LFS object reuse bypasses Code-unit authorization 0.3%
• CVE-2026-28737 High 8.7 Gitea 3D file viewer allows stored XSS through glTF extensionsRequired 0.4%
• CVE-2026-28705 Medium 5.3 Gitea repository dumps write release assets using unsafe path names 0.5%
• CVE-2026-28699 High 8.1 Gitea Basic Auth bypasses OAuth2 access token scopes 0.6%
• CVE-2026-27783 Medium 4.3 Gitea issue-template APIs bypass repository unit authorization 0.4%
• CVE-2026-27780 Critical 9.8 Gitea pre-receive hook can miss branch-protection checks after scanner errors 0.6%
• CVE-2026-27779 High 7.5 Gitea forwarded-proto handling allows public URL spoofing 0.6%
• CVE-2026-27775 High 8.8 Gitea pre-receive hook permission cache allows full repository write access 0.9%
• CVE-2026-27771 High 8.2 Gitea Composer package source links use insufficient permission checks 1.4%
• CVE-2026-27761 Medium 4.3 Gitea repository feeds bypass API token scope enforcement 0.5%
• CVE-2026-27660 High 7.5 Gitea draft releases use insufficient permission checks 0.5%
• CVE-2026-27657 High 7.5 Gitea email settings allow changing another user's primary email address 0.5%
• CVE-2026-26307 High 7.5 Gitea git grep search lacks a timeout 0.6%
• CVE-2026-26292 Critical 9.8 Gitea LFS mirror synchronization bypasses migration HTTP transport restrictions 0.7%
• CVE-2026-26247 Critical 9.1 Gitea OAuth2 PKCE S256 challenges are not enforced during token exchange 0.5%
• CVE-2026-26232 Critical 9.1 Gitea OAuth2 authorization codes lack expiry and reuse enforcement 0.5%
• CVE-2026-26231 High 8.5 Gitea maintainer-edit permissions allow unauthorized commits to readable repositories 0.4%
• CVE-2026-25782 Medium 5.3 Gitea tracked-time deletion can target entries from another issue 0.4%
• CVE-2026-25779 Medium 6.1 Gitea redirect handling permits open redirects through backslash paths 0.3%
• CVE-2026-25718 Critical 9.1 Gitea template repository generation mishandles symlinked paths 0.6%
• CVE-2026-25714 Medium 4.3 Gitea user organization API bypasses public-only token filtering 0.4%
• CVE-2026-25712 High 7.5 Gitea organization permission APIs expose private visibility information 0.5%
• CVE-2026-25038 High 7.5 Gitea private organization labels are visible to unauthorized users 0.6%
• CVE-2026-24690 High 7.5 Gitea pull-request branch updates use insufficient permission checks 0.5%
• CVE-2026-24451 High 7.5 Gitea fork synchronization can expose private parent repository data 0.4%
• CVE-2026-22874 Critical 9.6 Gitea webhook and migration allow-list filtering permits SSRF 0.5%
• CVE-2026-22555 High 8.1 Gitea organization forks can expose organization secrets without create permission 0.4%
• CVE-2026-22547 Critical 9.1 Gitea repository creation accepts invalid field values 0.5%
• CVE-2026-20909 Medium 5.3 Gitea tracked-time list endpoint has insufficient permission checks 0.4%
• CVE-2026-20896 Critical 9.8 Gitea Docker image trusts spoofable reverse-proxy headers by default 2.8%
• CVE-2026-20779 High 7.1 Gitea TOTP single-use enforcement defect allows OTP replay 0.5%
• CVE-2026-20706 Critical 9.1 Gitea repository archive downloads bypass token scope checks 0.6%
• CVE-2026-20912 Critical 9.1 Gitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosure 0.5%
• CVE-2026-20904 Medium 6.5 Gitea: Broken access control in OpenID visibility toggle enables cross-user visibility changes 0.3%
• CVE-2026-20897 Critical 9.1 Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR) 0.5%
• CVE-2026-20888 Medium 4.3 Gitea Pull Requests Auto-Merge: Read-Only Users Can Cancel Scheduled Auto-Merge via Web Endpoint (Authorization Bypass) 0.3%
• CVE-2026-20883 Medium 6.5 Gitea Stopwatch API Missing Authorization Check Leads to Post-Revocation Information Disclosure 0.4%
• CVE-2026-20800 Medium 6.5 Notification API Leaks Private Repository Issue Titles After Collaborator Permission Revocation 0.4%
• CVE-2026-20750 Critical 9.1 Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR) 0.4%
• CVE-2026-20736 High 7.5 Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Check 0.4%
• CVE-2026-0798 Low 3.5 Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocation 0.3%
• CVE-2024-6886 Critical 10.0 Inproper Sanitation of field leading to stored XSS 33.0%