gitea vulnerabilities (Alpine)

14 vulnerabilities.

• gitea Alpine Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• gitea Alpine Gitea vulnerable to Argument Injection CVE-2022-42968 Fix available 9.8 CriticalOctober 16, 2022
• gitea Alpine Denial of service via crafted Accept-Language header in golang.org/x/text/language CVE-2022-32149 Fix available 7.5 HighOctober 11, 2022
• gitea Alpine Shell command injection in gitea CVE-2022-30781 Public exploitFix available EPSS 87.9% 7.5 HighMay 16, 2022
• gitea Alpine Arbitrary file deletion in gitea CVE-2022-27313 Fix available 7.5 HighMay 3, 2022
• gitea Alpine Path Traversal in Gitea CVE-2021-29134 Fix available 5.3 MediumMarch 15, 2022
• gitea Alpine Reuse of one time passwords allowed in Gitea CVE-2021-45331 Fix available 9.8 CriticalFebruary 9, 2022
• gitea Alpine Cross-site Scripting in Gitea CVE-2021-45329 Fix available 6.1 MediumFebruary 8, 2022
• gitea Alpine Capture-replay in Gitea CVE-2021-45327 Fix available 9.8 CriticalFebruary 8, 2022
• gitea Alpine Cross Site Request Forgery in Gitea CVE-2021-45326 Fix available 8.8 HighFebruary 8, 2022
• gitea Alpine Cross-site scripting in bluemonday CVE-2021-29272 Fix available 6.1 MediumMarch 27, 2021
• gitea Alpine Cross-site Scripting in Gitea CVE-2021-28378 Public exploitFix available 3.7 LowMarch 15, 2021
• gitea Alpine Buffer Overflow in gitea CVE-2021-3382 Fix available 7.5 HighFebruary 5, 2021
• gitea Alpine Authorization bypass in github.com/dgrijalva/jwt-go CVE-2020-26160 Public exploitFix available 7.5 HighSeptember 30, 2020