Package · Alpine

gitea

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2022-30781 Public exploit EPSS 88%

Shell command injection in gitea

Gitea before 1.16.7 does not escape git fetch remote.

code.gitea.io/gitea gitea Alpine Go

May 16, 2022
High 7.5

CVE-2020-26160 Public exploit

Authorization bypass in github.com/dgrijalva/jwt-go

jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is the value of aud. This is a security problem if th…

gitea golang-github-coreos-discovery-etcd-io github.com/dgrijalva/jwt-go/v4 golang-github-dgrijalva-jwt-go Debian Ubuntu Alpine Go

Sep 30, 2020