Known vulnerabilities in Gitea - page 7

Software: Gitea
Software CPE: cpe:2.3:a:the_gitea_authors:gitea:*:*:*:*:*:*:*:*
Total vulnerabilities: 152
Public exploits: 12
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Gitea Gitea is affected by 152 known vulnerabilities: 10 high, 52 medium, 90 low Critical High Medium Low

Vulnerabilities (152)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU156119 - Missing Authorization
CVE-2026-109844
CWE-862 Low
No
No
1.27.0 19.10.2026 SB2026071452
#VU156108 - Authorization Bypass Through User-Controlled Key
CVE-2026-105268
CWE-639 Low
No
No
28.1.0 19.10.2026 SB2026101919
#VU156107 - Resource exhaustion
CVE-2026-96580
CWE-400 Low
No
No
28.0.0 19.10.2026 SB2026101918
#VU156106 - Least Privilege Violation
CVE-2026-103504
CWE-272 Low
No
No
28.0.0 19.10.2026 SB2026101918
#VU156105 - Incorrect Authorization
CVE-2026-79960
CWE-863 Low
No
No
28.0.0 19.10.2026 SB2026101918
#VU156104 - Improper Handling of Case Sensitivity
CVE-2026-103059
CWE-178 High
No
No
28.0.0 19.10.2026 SB2026101918
#VU156103 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-103667
CWE-79 Low
No
No
28.0.0 19.10.2026 SB2026101918
#VU156102 - Missing Authorization
CVE-2026-104632
CWE-862 Medium
No
No
28.0.0 19.10.2026 SB2026101918
#VU156101 - Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-94205
CWE-441 Medium
No
No
28.0.0 19.10.2026 SB2026101918
#VU156100 - Missing Authorization
CVE-2026-103670
CWE-862 Low
No
No
28.0.0 19.10.2026 SB2026101918
#VU156099 - Improper Enforcement of Behavioral Workflow
CVE-2026-104626
CWE-841 Medium
No
No
28.0.0 19.10.2026 SB2026101918
#VU156098 - Out-of-bounds read
CVE-2026-96399
CWE-125 Low
No
No
28.0.0 19.10.2026 SB2026101918
#VU146345 - Server-Side Request Forgery (SSRF)
CVE-2026-25946
CWE-918 Low
No
No
1.27.0 31.08.2026 SB2026071452
#VU137455 - Server-Side Request Forgery (SSRF)
CVE-2026-59765
CWE-918 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137454 - Improper Authorization
CVE-2026-58439
CWE-285 Medium
No
No
1.27.0 14.07.2026 SB2026071452
#VU137453 - Improper Restriction of Security Token Assignment
CVE-2026-58429
CWE-1259 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137452 - Server-Side Request Forgery (SSRF)
CVE-2026-23603
CWE-918 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137451 - Improper input validation
CVE-2026-59763
CWE-20 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137450 - Exposure of sensitive information to an unauthorized actor
CVE-2026-58511
CWE-200 Low
No
No
1.27.0 14.07.2026 SB2026071452
#VU137449 - Missing Authorization
CVE-2026-58432
CWE-862 Medium
No
No
1.27.0 14.07.2026 SB2026071452


Showing elements 121 - 140 out of 152