Product · Gitea

Gitea Open Source Git Server

97 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.9

CVE-2026-58424 Public exploit

Permanent Fork PR Workflow Approval Gate Bypass

Permanent Fork PR Workflow Approval Gate Bypass

Gitea Gitea Open Source Git Server code.gitea.io/gitea Go

Jul 3, 2026
High 8.1

CVE-2026-28699 Public exploit

Gitea Basic Auth bypasses OAuth2 access token scopes

Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypassed through HTTP Basic authentication.

Gitea Gitea Open Source Git Server code.gitea.io/gitea Go

Jul 3, 2026
High 8.2

CVE-2026-27771 Public exploit

Gitea Composer package source links use insufficient permission checks

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.

Gitea Gitea Open Source Git Server code.gitea.io/gitea Go

Jul 3, 2026