Known vulnerabilities in Gitea - page 3

Software: Gitea
Software CPE: cpe:2.3:a:the_gitea_authors:gitea:*:*:*:*:*:*:*:*
Total vulnerabilities: 128
Public exploits: 12
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Gitea Gitea is affected by 128 known vulnerabilities: 9 high, 48 medium, 71 low Critical High Medium Low

Vulnerabilities (128)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137435 - Inefficient Algorithmic Complexity
CVE-2026-56657
CWE-407 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137434 - Incorrect Authorization
CVE-2026-58431
CWE-863 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137433 - Improper Access Control
CVE-2026-56654
CWE-284 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137432 - Incorrect Authorization
CVE-2026-56443
CWE-863 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137431 - Incorrect Authorization
CVE-2026-55987
CWE-863 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137430 - Incorrect Privilege Assignment
CVE-2026-58435
CWE-266 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137429 - Improper input validation
CVE-2026-58420
CWE-20 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137428 - Improper Access Control
CVE-2026-55986
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137427 - NULL Pointer Dereference
CVE-2026-55984
CWE-476 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137426 - Exposure of sensitive information to an unauthorized actor
CVE-2026-55982
CWE-200 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137425 - Missing Authorization
CVE-2026-58434
CWE-862 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137424 - Improper Certificate Validation
CVE-2026-54481
CWE-295 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137423 - Improper Access Control
CVE-2026-58417
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137422 - Missing Authorization
CVE-2026-50105
CWE-862 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137421 - Incorrect Authorization
CVE-2026-58416
CWE-863 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137420 - Allocation of Resources Without Limits or Throttling
CVE-2026-42931
CWE-770 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137419 - Authorization Bypass Through User-Controlled Key
CVE-2026-58445
CWE-639 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137418 - Improper Access Control
CVE-2026-58427
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137417 - Incorrect Authorization
CVE-2026-58444
CWE-863 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137416 - Incorrect Authorization
CVE-2026-58443
CWE-863 Medium
No
No
1.27.0 14.07.2026 SB2026071452


Showing elements 41 - 60 out of 128