gitea.dev

44 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Low 2.7

CVE-2026-58511

Webhook Authorization Header Returned in Plaintext via API

Webhook Authorization Header Returned in Plaintext via API

Gitea Gitea Open Source Git Server code.gitea.io/gitea gitea.dev Go

Aug 13, 2026
Low 2.7

CVE-2026-58445

Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API

Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API

Gitea Gitea Open Source Git Server code.gitea.io/gitea gitea.dev Go

Aug 13, 2026
Low 2.7

CVE-2026-55984

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

Gitea Gitea Open Source Git Server code.gitea.io/gitea gitea.dev Go

Aug 13, 2026
Low 3.1

CVE-2026-23603

Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim

Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim

Gitea Gitea Open Source Git Server code.gitea.io/gitea gitea.dev Go

Aug 13, 2026