Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: gitea Clear
ID Title
CVE-2026-60004 KEV [KEV] Code Injection in gitea (CVE-2026-60004)
code injection in gitea (CVE-2026-60004). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-20912 Vulnerability in gitea (CVE-2026-20912)
vulnerability in gitea (CVE-2026-20912). Confidential information can be exposed externally. Mitigation: upgrade to `1.25.4` or later.
CVE-2026-20897 Vulnerability in gitea (CVE-2026-20897)
vulnerability in gitea (CVE-2026-20897). Confidential information can be exposed externally. Mitigation: upgrade to `1.25.4` or later.
CVE-2026-20750 Vulnerability in gitea (CVE-2026-20750)
vulnerability in gitea (CVE-2026-20750). Confidential information can be exposed externally. Mitigation: upgrade to `1.25.4` or later.
CVE-2026-20736 Vulnerability in gitea (CVE-2026-20736)
vulnerability in gitea (CVE-2026-20736). Data can be tampered with by attackers. Mitigation: upgrade to `1.25.4` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →