Known vulnerabilities in Gitea - page 2

Software: Gitea
Software CPE: cpe:2.3:a:the_gitea_authors:gitea:*:*:*:*:*:*:*:*
Total vulnerabilities: 128
Public exploits: 12
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Gitea Gitea is affected by 128 known vulnerabilities: 9 high, 48 medium, 71 low Critical High Medium Low

Vulnerabilities (128)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146370 - Incorrect Authorization
CVE-2026-70396
CWE-863 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146369 - Incorrect Authorization
CVE-2026-70400
CWE-863 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146368 - Incorrect Permission Assignment for Critical Resource
CVE-2026-70402
CWE-732 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146367 - Improper Authorization
CVE-2026-70407
CWE-285 Low
No
No
1.27.3 31.08.2026 SB2026083147
#VU146366 - Incorrect Authorization
CVE-2026-71184
CWE-863 Medium
No
No
1.27.3 31.08.2026 SB2026083147
#VU142696 - Incorrect Authorization
CVE-2026-73804
CWE-863 Medium
No
No
1.27.2 15.08.2026 SB2026081541
#VU142695 - Improper Authentication
CVE-2026-73278
CWE-287 High
No
No
1.27.2 15.08.2026 SB2026081541
#VU142694 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-73800
CWE-829 Medium
No
No
1.27.2 15.08.2026 SB2026081541
#VU142693 - Missing Critical Step in Authentication
CVE-2026-73535
CWE-304 Medium
No
No
1.27.2 15.08.2026 SB2026081541
#VU142692 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-60008
CWE-79 Low
No
No
1.27.2 15.08.2026 SB2026081541
#VU142691 - Incorrect Privilege Assignment
CVE-2026-73814
CWE-266 Low
No
No
1.27.2 15.08.2026 SB2026081541
#VU142690 - Argument Injection or Modification
CVE-2026-73539
CWE-88 Low
No
No
1.27.2 15.08.2026 SB2026081541
#VU140783 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59774
CWE-22 High
Available
Exploited
1.27.1 03.08.2026 SB2026072953
#VU139995 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-60004
CWE-94 High
Available
Exploited
1.27.1 29.07.2026 SB2026072953
#VU137415 - Server-Side Request Forgery (SSRF)
CVE-2026-58442
CWE-918 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137414 - Server-Side Request Forgery (SSRF)
CVE-2026-58441
CWE-918 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137413 - Improper Access Control
CVE-2026-20800
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137412 - Improper Access Control
CVE-2026-58440
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137411 - Missing Authorization
CVE-2026-58433
CWE-862 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137410 - Missing Authorization
CVE-2026-58438
CWE-862 Low
No
No
1.27.0 14.07.2026 SB2026071452


Showing elements 21 - 40 out of 128