Read the docs

Gitea

Records241All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical40CVSS 9.0–10.0
CVSS high76CVSS 7.0–8.9

Exploited now

Gitea records in CISA KEV
TI-2026-42785 Gitea Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-25

Components

Products in the NVD configurations · select one to filter the records
Gitea 81 records CRITICAL

Records

241 records

TI-2026-16922 CVE-2026-20896 · GHSA-f75j-4cw6-rmx4

Gitea Docker image trusts spoofable reverse-proxy headers by default

Priority HIGH 82

Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are ena…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02755 Published 2026-07-03 Fixed in 1.26.3 CWE-284
TI-2026-42037 CVE-2026-58426 · GHSA-hg5r-vq93-9fv6

Improper signature verification in Gitea Open Source Git Server

Priority HIGH 76

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00233 Published 2026-07-03 Fixed in 1.26.2 CWE-347
TI-2026-41808 CVE-2026-58053 · GHSA-8qf9-pc52-j7cm

Gitea act_runner - Container Hardening Bypass via Workflow Container Options

Priority HIGH 76

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00442 Published 2026-06-28 No fix listed CWE-269
TI-2026-18365 CVE-2026-22874 · GHSA-2r5c-gw76-rh3w

Gitea webhook and migration allow-list filtering permits SSRF

Priority HIGH 76

Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration allow-list filtering.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00464 Published 2026-07-03 Fixed in 1.26.3 CWE-918
TI-2020-11072 CVE-2020-14144 · GHSA-3h6c-c475-jm7v

The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote…

Priority HIGH 76

The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer environments where the documentation was not understood (e.g., one viewpoint is that the dangerousness of…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.95432 Published 2020-10-16 Fixed in 1.12.6 CWE-78
TI-2026-40782 CVE-2026-56443 · GHSA-7p4h-3gxq-x3h3

Incorrect authorization in Gitea Open Source Git Server

Priority HIGH 74

Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00525 Published 2026-08-13 Fixed in 1.27.0 CWE-863
TI-2026-16760 CVE-2026-20706 · GHSA-cr4g-f395-h25h

Gitea repository archive downloads bypass token scope checks

Priority HIGH 74

Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass token scope checks on the web archive download endpoint.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00589 Published 2026-07-03 Fixed in 1.26.2 CWE-284
TI-2024-06386 CVE-2024-6886 · GHSA-4h4p-553m-46qh

Inproper Sanitation of field leading to stored XSS

Priority HIGH 74

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.32968 Published 2024-08-06 Fixed in 1.22.1 CWE-79
TI-2026-22133 CVE-2026-27775 · GHSA-649p-mmhf-85c7

Gitea pre-receive hook permission cache allows full repository write access

Priority HIGH 73

Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for other refs and escalate to full repository…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00908 Published 2026-07-03 Fixed in 1.26.3 CWE-863
TI-2026-73998 CVE-2026-59774

Org-mode file disclosure and code execution in Gitea

Priority HIGH 72

Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.28308 Published 2026-10-14 Fixed in 1.27.1 CWE-22
TI-2026-42048 CVE-2026-58438 · GHSA-xv9x-fj9g-vj6h

Missing authorization in Gitea Open Source Git Server

Priority HIGH 72

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00466 Published 2026-08-13 Partial fix · 1.27.0 CWE-862
Load more
Open these records in search →