Gitea Open Source Git Server vulnerabilities, page 3
97 vulnerabilities
Known vulnerabilities in Gitea Open Source Git Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-58508giteagitea open source git server
EPSS score0.48%
Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)CVE-2026-58433giteagitea open source git serverEPSS score0.51%
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization settingCVE-2026-58423giteagitea open source git server+1EPSS score0.54%
LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositoriesCVE-2026-58435giteagitea open source git server+2EPSS score0.29%
Gitea LFS Deploy-Key Privilege EscalationCVE-2026-58445giteagitea open source git server+2EPSS score0.37%
Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel APICVE-2026-58429giteagitea open source git server+2EPSS score0.47%
Public-Only Personal access tokens scope bypass in Organization and Permission EndpointsCVE-2026-58426giteagitea open source git server+1EPSS score0.30%
Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state writeCVE-2026-58422giteagitea open source git server+1EPSS score0.62%
Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accountsCVE-2026-58432giteagitea open source git server+2EPSS score0.43%
Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/giteaCVE-2026-58417giteagitea open source git server+1EPSS score0.47%
REST API exposes organization membership of private organizations to publicCVE-2026-58418giteagitea open source git server+1EPSS score0.41%
SSRF via HTTP Redirect in Repository MigrationCVE-2026-58510giteagitea open source git server+2EPSS score0.33%
GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->privateCVE-2026-58437giteagitea open source git server+2EPSS score0.34%
Repository Visibility Manipulation via Git Push OptionsCVE-2026-58438giteagitea open source git server+1EPSS score0.47%
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot accessCVE-2026-58441giteagitea open source git server+2EPSS score0.17%
SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURLCVE-2026-58434giteagitea open source git server+2EPSS score0.47%
Private Repository Metadata Remains Accessible After Access RevocationCVE-2026-58425giteagitea open source git server+2EPSS score0.33%
OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)CVE-2026-58428giteagitea open source git server+2EPSS score0.46%
Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)CVE-2026-58427giteagitea open source git server+1EPSS score0.47%
Private org member list leaked via /members API endpoint — incomplete fix for PR #38145CVE-2026-58439giteagitea open source git server+1EPSS score0.53%
Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag