Known vulnerabilities in Gitea - page 8

Software: Gitea
Software CPE: cpe:2.3:a:the_gitea_authors:gitea:*:*:*:*:*:*:*:*
Total vulnerabilities: 152
Public exploits: 12
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Gitea Gitea is affected by 152 known vulnerabilities: 10 high, 52 medium, 90 low Critical High Medium Low

Vulnerabilities (152)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU156121 - Allocation of Resources Without Limits or Throttling
CVE-2026-105964
CWE-770 Low
No
No
28.2.0 19.10.2026 SB2026101920
#VU156120 - Authorization Bypass Through User-Controlled Key
CVE-2026-110494
CWE-639 Low
No
No
28.2.0 19.10.2026 SB2026101920
#VU156118 - Incorrect Authorization
CVE-2026-97204
CWE-863 Low
No
No
28.2.0 19.10.2026 SB2026101920
#VU156117 - Exposure of sensitive information to an unauthorized actor
CVE-2026-110311
CWE-200 Low
No
No
28.2.0 19.10.2026 SB2026101920
#VU156116 - Cross-Site Request Forgery (CSRF)
CVE-2026-107618
CWE-352 Low
No
No
28.2.0 19.10.2026 SB2026101920
#VU156115 - Improper Authorization
CVE-2026-107686
CWE-285 Low
No
No
28.2.0 19.10.2026 SB2026101920
#VU156114 - Incorrect Authorization
CVE-2026-86684
CWE-863 Low
No
No
28.1.0 19.10.2026 SB2026101919
#VU156113 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-104633
CWE-835 Low
No
No
28.1.0 19.10.2026 SB2026101919
#VU156112 - Improper Authentication
CVE-2026-101023
CWE-287 Low
No
No
28.1.0 19.10.2026 SB2026101919
#VU156111 - Incorrect Authorization
CVE-2026-97208
CWE-863 Medium
No
No
28.1.0 19.10.2026 SB2026101919
#VU156110 - Incorrect Authorization
CVE-2026-89182
CWE-863 Low
No
No
28.1.0 19.10.2026 SB2026101919
#VU156109 - Incorrect Authorization
CVE-2026-105267
CWE-863 Low
No
No
28.1.0 19.10.2026 SB2026101919


Showing elements 141 - 160 out of 152