Known vulnerabilities in Gitea - page 5

Software: Gitea
Software CPE: cpe:2.3:a:the_gitea_authors:gitea:*:*:*:*:*:*:*:*
Total vulnerabilities: 152
Public exploits: 12
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Gitea Gitea is affected by 152 known vulnerabilities: 10 high, 52 medium, 90 low Critical High Medium Low

Vulnerabilities (152)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137428 - Improper Access Control
CVE-2026-55986
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137427 - NULL Pointer Dereference
CVE-2026-55984
CWE-476 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137426 - Exposure of sensitive information to an unauthorized actor
CVE-2026-55982
CWE-200 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137425 - Missing Authorization
CVE-2026-58434
CWE-862 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137424 - Improper Certificate Validation
CVE-2026-54481
CWE-295 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137423 - Improper Access Control
CVE-2026-58417
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137422 - Missing Authorization
CVE-2026-50105
CWE-862 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137421 - Incorrect Authorization
CVE-2026-58416
CWE-863 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137420 - Allocation of Resources Without Limits or Throttling
CVE-2026-42931
CWE-770 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137419 - Authorization Bypass Through User-Controlled Key
CVE-2026-58445
CWE-639 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137418 - Improper Access Control
CVE-2026-58427
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137417 - Incorrect Authorization
CVE-2026-58444
CWE-863 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137416 - Incorrect Authorization
CVE-2026-58443
CWE-863 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137415 - Server-Side Request Forgery (SSRF)
CVE-2026-58442
CWE-918 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137414 - Server-Side Request Forgery (SSRF)
CVE-2026-58441
CWE-918 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137413 - Improper Access Control
CVE-2026-20800
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137412 - Improper Access Control
CVE-2026-58440
CWE-284 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137411 - Missing Authorization
CVE-2026-58433
CWE-862 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137410 - Missing Authorization
CVE-2026-58438
CWE-862 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU25826 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Medium
No
No
1.10.6, 1.11.3 09.03.2020 SB2020030905


Showing elements 81 - 100 out of 152