Known vulnerabilities in Gitea

Software: Gitea
Software CPE: cpe:2.3:a:the_gitea_authors:gitea:*:*:*:*:*:*:*:*
Total vulnerabilities: 128
Public exploits: 12
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Gitea Gitea is affected by 128 known vulnerabilities: 9 high, 48 medium, 71 low Critical High Medium Low

Vulnerabilities (128)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146365 - Improper Access Control
CVE-2026-71301
CWE-284 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146364 - Observable discrepancy
CVE-2026-73504
CWE-203 Medium
No
No
1.27.3 31.08.2026 SB2026083147
#VU146363 - Incorrect Authorization
CVE-2026-73126
CWE-863 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146362 - Resource exhaustion
CVE-2026-73130
CWE-400 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146361 - Exposure of sensitive information to an unauthorized actor
CVE-2026-73135
CWE-200 Medium
No
No
1.27.3 31.08.2026 SB2026083147
#VU146360 - Allocation of Resources Without Limits or Throttling
CVE-2026-73273
CWE-770 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146359 - Incorrect Authorization
CVE-2026-60010
CWE-863 Medium
No
No
1.27.3 31.08.2026 SB2026083147
#VU146358 - Resource exhaustion
CVE-2026-60018
CWE-400 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146357 - Resource exhaustion
CVE-2026-60021
CWE-400 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146356 - Resource exhaustion
CVE-2026-62925
CWE-400 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146355 - Resource exhaustion
CVE-2026-63021
CWE-400 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146354 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-63792
CWE-280 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146353 - Improper Access Control
CVE-2026-66849
CWE-284 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146352 - Incorrect Authorization
CVE-2026-66853
CWE-863 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146351 - Reliance on Untrusted Inputs in a Security Decision
CVE-2026-66874
CWE-807 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146350 - Improper Access Control
CVE-2026-66877
CWE-284 Medium
No
No
1.27.3 31.08.2026 SB2026083147
#VU146349 - Improper Access Control
CVE-2026-67577
CWE-284 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146348 - Improper Access Control
CVE-2026-68957
CWE-284 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146347 - Improper Access Control
CVE-2026-68964
CWE-284 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146346 - Authorization Bypass Through User-Controlled Key
CVE-2026-78433
CWE-639 Medium
No
No
1.27.3 31.08.2026 SB2026083147


Showing elements 1 - 20 out of 128