Package · Alpine

gitea

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 5.9

CVE-2023-48795 Public exploit EPSS 94%

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

openssh lxd erlang openssh Debian Ubuntu Alpine PyPI Go crates.io

Dec 18, 2023
Medium 5.3

CVE-2021-29134

Path Traversal in Gitea

The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.

code.gitea.io/gitea gitea Alpine Go

Mar 15, 2022
Medium 6.1

CVE-2021-45329

Cross-site Scripting in Gitea

Cross Site Scripting (XSS) vulnerability exists in Gitea before 1.5.1 via the repository settings inside the external wiki/issue tracker URL field.

github.com/go-gitea/gitea gitea golang-code.gitea-git golang-code.gitea-sdk Ubuntu Alpine Go

Feb 8, 2022
Medium 6.1

CVE-2021-29272

Cross-site scripting in bluemonday

bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the "script" string.

gitea golang-github-microcosm-cc-bluemonday github.com/microcosm-cc/bluemonday Ubuntu Alpine Go

Mar 27, 2021