Gitea Open Source Git Server

5 results · Clear filters · Feed

• Low 2.7
  CVE-2026-58511

  Webhook Authorization Header Returned in Plaintext via API

  Webhook Authorization Header Returned in Plaintext via API

  Gitea Gitea Open Source Git Server code.gitea.io/gitea gitea.dev Go
  Aug 13, 2026
• Low 2.7
  CVE-2026-58445

  Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API

  Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API

  Gitea Gitea Open Source Git Server code.gitea.io/gitea gitea.dev Go
  Aug 13, 2026
• Low 2.7
  CVE-2026-55984

  Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

  Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

  Gitea Gitea Open Source Git Server code.gitea.io/gitea gitea.dev Go
  Aug 13, 2026
• Low 3.1
  CVE-2026-23603

  Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim

  Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim

  Gitea Gitea Open Source Git Server code.gitea.io/gitea gitea.dev Go
  Aug 13, 2026
• Low 3.5
  CVE-2026-0798

  Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocation

  Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repository is changed from public to private, users who previously watched the repository may continue to receive release notifications, potenti…

  Gitea Gitea Open Source Git Server code.gitea.io/gitea Go
  Jan 22, 2026