Known vulnerabilities in Gitea - page 2

Software: Gitea
Software CPE: cpe:2.3:a:the_gitea_authors:gitea:*:*:*:*:*:*:*:*
Total vulnerabilities: 152
Public exploits: 12
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Gitea Gitea is affected by 152 known vulnerabilities: 10 high, 52 medium, 90 low Critical High Medium Low

Vulnerabilities (152)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146370 - Incorrect Authorization
CVE-2026-70396
CWE-863 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146369 - Incorrect Authorization
CVE-2026-70400
CWE-863 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146368 - Incorrect Permission Assignment for Critical Resource
CVE-2026-70402
CWE-732 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146367 - Improper Authorization
CVE-2026-70407
CWE-285 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146366 - Incorrect Authorization
CVE-2026-71184
CWE-863 Medium
No
No
1.27.3 31.08.2026 SB2026083147
#VU142696 - Incorrect Authorization
CVE-2026-73804
CWE-863 Medium
No
No
1.27.2 15.08.2026 SB2026081541
#VU142695 - Improper Authentication
CVE-2026-73278
CWE-287 High
No
No
1.27.2 15.08.2026 SB2026081541
#VU142694 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-73800
CWE-829 Medium
No
No
1.27.2 15.08.2026 SB2026081541
#VU142693 - Missing Critical Step in Authentication
CVE-2026-73535
CWE-304 Medium
No
No
1.27.2 15.08.2026 SB2026081541
#VU142692 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-60008
CWE-79 Low
No
No
1.27.2 15.08.2026 SB2026081541
#VU142691 - Incorrect Privilege Assignment
CVE-2026-73814
CWE-266 Low
No
No
1.27.2 15.08.2026 SB2026081541
#VU142690 - Argument Injection or Modification
CVE-2026-73539
CWE-88 Low
No
No
1.27.2 15.08.2026 SB2026081541
#VU140783 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59774
CWE-22 High
Available
Exploited
1.27.1 03.08.2026 SB2026072953
#VU139995 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-60004
CWE-94 High
Available
Exploited
1.27.1 29.07.2026 SB2026072953
#VU137409 - Improper input validation
CVE-2026-27771
CWE-20 High
Available
No
1.26.2 14.07.2026 SB2026070163
#VU136614 - Improper Verification of Cryptographic Signature
CVE-2026-58426
CWE-347 Medium
Available
No
1.26.2 01.07.2026 SB2026070163
#VU136607 - Improper Authorization
CVE-2026-58424
CWE-285 Medium
Available
No
1.26.3 01.07.2026 SB2026070161
#VU136606 - Improper Authentication
CVE-2026-58423
CWE-287 Medium
Available
No
1.26.3 01.07.2026 SB2026070161
#VU136605 - Improper Authorization
CVE-2026-58422
CWE-285 Medium
Available
No
1.26.4 01.07.2026 SB2026070162
#VU136056 - Server-Side Request Forgery (SSRF)
CVE-2026-58418
CWE-918 Medium
No
No
1.26.3 01.07.2026 SB2026070161


Showing elements 21 - 40 out of 152