Known vulnerabilities in Gitea 28.1.0
Vendor:
The Gitea Authors
Software:
Gitea
Version:
28.1.0
Software CPE:
cpe:2.3:a:the_gitea_authors:gitea:*:*:*:*:*:*:*:*
Website:
https://gitea.io/en-us/
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Vulnerabilities by Severity
28.2.0
28.1.0
28.0.0
1.27.3
1.27.2
1.27.1
1.27.0
1.26.4
1.26.3
1.26.2
1.26.1
1.26.0
1.25.5
1.25.4
1.25.3
1.25.2
1.25.1
1.25.0
1.24.7
1.24.6
1.24.5
1.24.4
1.24.3
1.24.2
1.24.1
1.24.0
1.23.8
1.23.7
1.23.6
1.23.5
1.23.4
1.23.3
1.23.2
1.23.1
1.23.0
1.22.6
1.22.5
1.22.4
1.22.3
1.22.2
1.22.1
1.22.0
1.21.11
1.21.10
1.21.9
1.21.8
1.21.7
1.21.6
1.21.5
1.21.4
1.21.3
1.21.2
1.20.6
1.21.1
1.21.0
1.20.5
1.20.4
1.20.3
1.20.2
1.20.1
1.20.0
1.19.4
1.19.3
1.19.2
1.19.1
1.19.0
1.18.5
1.18.4
1.18.3
1.18.2
1.18.1
1.18.0
1.17.4
1.17.3
1.17.2
1.17.1
1.17.0
1.16.9
1.16.8
1.16.6
1.16.7
1.16.5
1.16.4
1.16.3
1.16.2
1.16.1
1.16.0
1.15.11
1.15.10
1.15.9
1.15.8
1.15.7
1.15.6
1.15.5
1.15.4
1.15.3
1.15.2
1.15.1
1.14.7
1.15.0
1.14.6
1.14.5
1.14.4
1.14.3
1.14.2
1.14.1
1.14.0
1.13.7
1.13.5
1.13.6
1.13.4
1.13.3
1.13.2
1.13.1
1.13.0
1.12.6
1.12.5
1.12.4
1.12.3
1.12.2
1.12.1
1.11.8
1.11.7
1.12.0
1.11.6
1.11.5
1.11.4
1.10.6
1.11.3
1.11.2
1.11.1
1.11.0
1.10.5
1.10.4
1.10.3
1.10.2
1.10.1
1.10.0
1.9.6
1.9.5
1.9.4
1.9.3
1.9.2
1.9.1
1.9.0
1.8.3
1.8.2
1.8.1
1.8.0
1.7.6
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.5.3
1.5.2
1.5.1
1.5.0
1.4.3
1.4.2
1.4.1
1.4.0
1.3.3
1.3.2
1.3.1
1.3.0
1.2.3
1.2.2
1.2.1
1.2.0
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.2
1.0.1
1.0.0
0.9.99
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU156121 - Allocation of Resources Without Limits or Throttling CVE-2026-105964 |
CWE-770 | Low | 28.2.0 | 19.10.2026 |
SB2026101920 |
||
| #VU156120 - Authorization Bypass Through User-Controlled Key CVE-2026-110494 |
CWE-639 | Low | 28.2.0 | 19.10.2026 |
SB2026101920 |
||
| #VU156118 - Incorrect Authorization CVE-2026-97204 |
CWE-863 | Low | 28.2.0 | 19.10.2026 |
SB2026101920 |
||
| #VU156117 - Exposure of sensitive information to an unauthorized actor CVE-2026-110311 |
CWE-200 | Low | 28.2.0 | 19.10.2026 |
SB2026101920 |
||
| #VU156116 - Cross-Site Request Forgery (CSRF) CVE-2026-107618 |
CWE-352 | Low | 28.2.0 | 19.10.2026 |
SB2026101920 |
||
| #VU156115 - Improper Authorization CVE-2026-107686 |
CWE-285 | Low | 28.2.0 | 19.10.2026 |
SB2026101920 |