Skip to contentGitea vulnerabilities
Newest
- giteaGitea sometimes mishandles propagation of token scope for access control within one of its own package registriesCVE-2025-68944Fix available5.0 Medium
- giteaGitea inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort orderCVE-2025-68943Fix available5.3 Medium
- giteaGitea allows XSS because the search input box (for creating tags and branches) is v-html instead of v-textCVE-2025-68942Fix available5.4 Medium
- giteaGitea mishandles access to a private resource upon receiving an API token with scope limited to public resourcesCVE-2025-68941Fix available4.9 Medium
- giteaGitea doesn't adequately enforce branch deletion permissions after merging a pull request.CVE-2025-68940Fix available3.1 Low
- giteaGitea allows attackers to add attachments with forbidden file extensionsCVE-2025-68939Fix available8.2 High
- giteaGitea mishandles authorization for deletion of releasesCVE-2025-68938Fix available4.3 Medium
- gitea, gitea open source git server +1 moreInproper Sanitation of field leading to stored XSSCVE-2024-6886Fix availableEPSS 33.0%10.0 Critical
- giteaGitea erroneous repo clonesCVE-2022-38795Fix available6.5 Medium
- gitea, go-gitea go-gitea/gitea +1 moreOpen Redirect in go-gitea/giteaCVE-2023-3515Fix available3.0 Low
- gitea, jenkins project gitea plugin +1 moreJenkins Gitea Plugin vulnerable to Cleartext Transmission of Sensitive InformationCVE-2022-46685Fix available4.3 Medium
- giteaGitea vulnerable to Argument InjectionCVE-2022-42968Fix available9.8 Critical
- giteaGitea allowed assignment of private issuesCVE-2022-38183Fix available6.5 Medium
- gitea, go-gitea go-gitea/gitea +1 moreCross-site Scripting (XSS) - Stored in go-gitea/giteaCVE-2022-1928Fix available4.4 Medium
- giteaShell command injection in giteaCVE-2022-30781Public exploitFix availableEPSS 87.9%7.5 High
- giteaArbitrary file deletion in giteaCVE-2022-27313Fix available7.5 High
- gitea, go-gitea go-gitea/gitea +1 moreOpen Redirect on login in go-gitea/giteaCVE-2022-1058Fix availableEPSS 53.2%7.2 High
- giteaPath Traversal in GiteaCVE-2021-29134Fix available5.3 Medium
- gitea, go-gitea go-gitea/gitea +1 moreMissing Authorization in go-gitea/giteaCVE-2022-0905Fix available6.5 Medium
- giteaReuse of one time passwords allowed in GiteaCVE-2021-45331Fix available9.8 Critical
- giteaImproper Privilege Management in GiteaCVE-2021-45330Fix available9.8 Critical
- giteaCross-site Scripting in GiteaCVE-2021-45329Fix available6.1 Medium
- giteaOpen redirect in GiteaCVE-2021-45328Fix available6.1 Medium
- giteaCapture-replay in GiteaCVE-2021-45327Fix available9.8 Critical
- giteaCross Site Request Forgery in GiteaCVE-2021-45326Fix available8.8 High
- giteaGitea displaying raw OpenID error in UICVE-2021-45325Fix available7.5 High
- giteaCross-site Scripting in GiteaCVE-2021-28378Public exploitFix available3.7 Low
- giteaBuffer Overflow in giteaCVE-2021-3382Fix available7.5 High
- giteaImproper Access Control in GiteaCVE-2020-28991Fix available9.8 Critical
- giteaArbitrary Code Execution in GiteaCVE-2020-14144Public exploitFix availableDisputedEPSS 95.4%7.2 High
- giteaDenial of Service in GiteaCVE-2020-13246Fix available7.5 High
- giteaGitea XSS VulnerabilityCVE-2019-1010261Fix available6.1 Medium
- giteaGitea XSS Vulnerability in Repository DescriptionCVE-2019-1010314Fix available6.1 Medium
- gitea, jenkins project gitea plugin +1 moreImproper handling of untrusted branches in Gitea Jenkins PluginCVE-2019-10330Fix available7.5 High
- giteaGitea Allows 1FA Even for 2FA-Enrolled AccountsCVE-2019-11576Fix available9.8 Critical
- giteaGitea Remote Code ExecutionCVE-2019-11229Public exploitFix availableEPSS 55.0%8.8 High
- giteaGitea Improper Input ValidationCVE-2019-11228Fix available7.5 High
- giteaGitea Arbitrary File Delete VulnerabilityCVE-2019-1000002Fix available6.5 Medium
- giteaGitea Remote Code Execution (RCE)CVE-2018-18926Fix available9.8 Critical
- giteaGitea Exposes Private Email AddressesCVE-2018-1000803Fix available5.3 Medium
- gitea, gogs +1 moreGogs and Gitea SSRF VulnerabilityCVE-2018-15192Fix available8.6 High