Known vulnerabilities in Gitea

Software: Gitea
Software CPE: cpe:2.3:a:the_gitea_authors:gitea:*:*:*:*:*:*:*:*
Total vulnerabilities: 95
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Gitea Gitea is affected by 95 known vulnerabilities: 8 high, 39 medium, 48 low Critical High Medium Low

Vulnerabilities (95)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140783 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59774
CWE-22 High
No
No
1.27.1 03.08.2026 SB2026072953
#VU139995 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-60004
CWE-94 High
Available
No
1.27.1 29.07.2026 SB2026072953
#VU137432 - Incorrect Authorization
CVE-2026-56443
CWE-863 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137431 - Incorrect Authorization
CVE-2026-55987
CWE-863 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137430 - Incorrect Privilege Assignment
CVE-2026-58435
CWE-266 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137429 - Improper input validation
CVE-2026-58420
CWE-20 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137428 - Improper Access Control
CVE-2026-55986
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137427 - NULL Pointer Dereference
CVE-2026-55984
CWE-476 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137426 - Exposure of sensitive information to an unauthorized actor
CVE-2026-55982
CWE-200 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137425 - Missing Authorization
CVE-2026-58434
CWE-862 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137424 - Improper Certificate Validation
CVE-2026-54481
CWE-295 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137423 - Improper Access Control
CVE-2026-58417
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137422 - Missing Authorization
CVE-2026-50105
CWE-862 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137421 - Incorrect Authorization
CVE-2026-58416
CWE-863 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137420 - Allocation of Resources Without Limits or Throttling
CVE-2026-42931
CWE-770 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137419 - Authorization Bypass Through User-Controlled Key
CVE-2026-58445
CWE-639 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137418 - Improper Access Control
CVE-2026-58427
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137417 - Incorrect Authorization
CVE-2026-58444
CWE-863 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137416 - Incorrect Authorization
CVE-2026-58443
CWE-863 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137411 - Missing Authorization
CVE-2026-58433
CWE-862 Medium
No
No
1.27.0 14.07.2026 SB2026071452


Showing elements 1 - 20 out of 95