InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product gitea:gitea. Show all products

98 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2026-97859Not yet scoredGitea API disclosure of private user social graph, keys and stars
Assigned by Gitea
Oct 18, 2026
CVE-2026-97204Not yet scoredGitea label deletion across repository and organization IDs
Assigned by Gitea
Oct 18, 2026
CVE-2026-110494Not yet scoredGitea release attachment re-linking of issue attachments
Assigned by Gitea
Oct 18, 2026
CVE-2026-110324Not yet scoredGitea private profile information disclosure through POST request
Assigned by Gitea
Oct 18, 2026
CVE-2026-110311Not yet scoredGitea draft release creation disclosing attachment metadata
Assigned by Gitea
Oct 18, 2026
CVE-2026-109844Not yet scoredGitea watched repositories API disclosure after access revocation
Assigned by Gitea
Oct 18, 2026
CVE-2026-107686Not yet scoredGitea reactions accepted on locked issues and comments
Assigned by Gitea
Oct 18, 2026
CVE-2026-107618Not yet scoredGitea cross-site request forgery on repository topics
Assigned by Gitea
Oct 18, 2026
CVE-2026-105964Not yet scoredGitea Actions artifact v4 API unbounded request body
Assigned by Gitea
Oct 18, 2026
CVE-2026-105661Not yet scoredGitea panic on the repositories route of individual users
Assigned by Gitea
Oct 18, 2026
CVE-2026-109553Not yet scoredGitea SSH certificate principal impersonation of other users
Assigned by Gitea
Oct 18, 2026
CVE-2026-104627Not yet scoredGitea OpenID account linking without session binding
Assigned by Gitea
Oct 18, 2026
CVE-2026-78433Medium 5.9Gitea private attachment disclosure through repository mismatch
Assigned by Gitea
Oct 14, 2026
CVE-2026-78231Medium 5.3Gitea blind SSRF through OpenID assertion verification
Assigned by Gitea
Oct 14, 2026
CVE-2026-73814Medium 6.5Gitea repository ownership escalation by administrators
Assigned by Gitea
Oct 14, 2026
CVE-2026-73804High 8.1Gitea API token scope escalation through HTTP signatures
Assigned by Gitea
Oct 14, 2026
CVE-2026-73800High 8.8Gitea reusable workflow secret exposure in pull_request_target
Assigned by Gitea
Oct 14, 2026
CVE-2026-73539High 7.5Gitea external renderer argument injection and code execution
Assigned by Gitea
Oct 14, 2026
CVE-2026-73535High 8.8Gitea second-factor bypass through OpenID identity linking
Assigned by Gitea
Oct 14, 2026
CVE-2026-73273Medium 4.3Gitea Maven checksum upload quota bypass and memory exhaustion
Assigned by Gitea
Oct 14, 2026
CVE-2026-73135Medium 5.3Gitea hidden-owner repository listing disclosure
Assigned by Gitea
Oct 14, 2026
CVE-2026-73130Medium 4.3Gitea repository initialization resource exhaustion
Assigned by Gitea
Oct 14, 2026
CVE-2026-73126Medium 4.3Gitea private workflow badge token scope bypass
Assigned by Gitea
Oct 14, 2026
CVE-2026-71301Medium 4.3Gitea private pull request title disclosure through markup
Assigned by Gitea
Oct 14, 2026
CVE-2026-71184High 8.8Gitea fork workflow approval bypass through review events
Assigned by Gitea
Oct 14, 2026
CVE-2026-70407Medium 4.3Gitea organization listing token scope bypass
Assigned by Gitea
Oct 14, 2026
CVE-2026-70406Medium 6.5Gitea private comparison disclosure with public-only tokens
Assigned by Gitea
Oct 14, 2026
CVE-2026-70402Medium 5.8Gitea local code execution through writable Git hooks
Assigned by Gitea
Oct 14, 2026
CVE-2026-70400Medium 5.4Gitea private migration creation with public-only tokens
Assigned by Gitea
Oct 14, 2026
CVE-2026-70396Medium 5.4Gitea organization repository creation token scope bypass
Assigned by Gitea
Oct 14, 2026
CVE-2026-68964Medium 4.3Gitea restricted-user SSH and GPG key metadata disclosure
Assigned by Gitea
Oct 14, 2026
CVE-2026-68957Medium 4.3Gitea restricted-user issue search disclosure
Assigned by Gitea
Oct 14, 2026
CVE-2026-67577Medium 4.3Gitea restricted-user activity and heatmap disclosure
Assigned by Gitea
Oct 14, 2026
CVE-2026-66877High 8.1Gitea fork workflow approval bypass through concurrency cancellation
Assigned by Gitea
Oct 14, 2026
CVE-2026-66874Medium 6.5Gitea required Actions check bypass through skipped workflows
Assigned by Gitea
Oct 14, 2026
CVE-2026-66853Medium 4.3Gitea restricted-user organization metadata disclosure
Assigned by Gitea
Oct 14, 2026
CVE-2026-66849Medium 4.3Gitea restricted-user package visibility bypass
Assigned by Gitea
Oct 14, 2026
CVE-2026-63792Medium 5.3Gitea private reusable workflow disclosure to fork runs
Assigned by Gitea
Oct 14, 2026
CVE-2026-63021Medium 6.5Gitea Swift package manifest memory exhaustion
Assigned by Gitea
Oct 14, 2026
CVE-2026-62925Medium 6.5Gitea Alpine package parsing memory exhaustion
Assigned by Gitea
Oct 14, 2026
CVE-2026-60021Medium 6.5Gitea GitLab migration denial of service
Assigned by Gitea
Oct 14, 2026
CVE-2026-60018Medium 6.5Gitea OneDev migration denial of service
Assigned by Gitea
Oct 14, 2026
CVE-2026-60010Medium 6.5Gitea organization team policy bypass through repository API
Assigned by Gitea
Oct 14, 2026
CVE-2026-60008Low 3.5Gitea Jupyter notebook UI redress through CSS class injection
Assigned by Gitea
Oct 14, 2026
CVE-2026-59774Critical 9.8Gitea Org-mode file disclosure and code execution
Assigned by Gitea
Oct 14, 2026
CVE-2026-59766Medium 4.3Gitea private repository metadata disclosure after access revocation
Assigned by Gitea
Oct 14, 2026
CVE-2026-25946Medium 5.3Gitea OpenID discovery server-side request forgery
Assigned by Gitea
Oct 14, 2026
CVE-2026-97626Medium 4.3Gitea profile feed disclosure bypassing user visibility
Assigned by Gitea
Oct 6, 2026
CVE-2026-96594Medium 6.1Gitea repository media API stored XSS
Assigned by Gitea
Oct 6, 2026
CVE-2026-89182Medium 5.4Gitea push-to-create bypass of FORCE_PRIVATE policy
Assigned by Gitea
Oct 6, 2026
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.