Skip to content
OpenAdvisories

Vendor

Gitea

210 known vulnerabilities.

Products

Gitea 111 Gitea Open Source Git Server 97 Gitea Runner 1 act_runner 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-60004 Exploited Public exploit EPSS 24%

    Gitea: Remote Code Execution via diffpatch Git Hook Installation

    Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

    Gitea Gitea code.gitea.io/gitea gitea.dev Alpine Go
    KEV Aug 25, 2026