| Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claimCVE-2026-23603 · GHSA-X77V-Q46J-393G |
code.gitea.io/giteagitea.dev |
Go |
Low
|
Fix reported |
|
| Gitea: Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118CVE-2026-56443 · GHSA-7P4H-3GXQ-X3H3Version ranges need review. |
code.gitea.io/giteagitea.dev |
Go |
Medium
|
Fix reported |
|
| Gitea: Two SSRF findingsCVE-2026-58314 · GHSA-2FCR-JFVC-VGG2 |
code.gitea.io/giteagitea.dev |
GoRed Hat |
High
|
Fix reported |
|
| Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataCVE-2026-59765 · GHSA-2WM4-VWP6-V7XC |
code.gitea.io/giteagitea.dev |
Go |
Medium
|
Fix reported |
|
| Gitea SSH Key Parser Denial of ServiceCVE-2026-56657 · GHSA-4XJF-493Q-98P3Version ranges need review. |
code.gitea.io/giteagitea.dev |
Go |
Medium
|
Fix reported |
|
| Gitea: Remote Code Execution via diffpatch Git Hook InstallationCVE-2026-60004 · GHSA-RCR6-4JQH-J84MVersion ranges need review. |
code.gitea.io/giteagitea.dev |
Go |
Critical
|
Fix reported |
|
| Gitea: OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token ScopesCVE-2026-55982 · GHSA-MG4F-X9V4-6H2P |
code.gitea.io/giteagitea.dev |
Go |
Medium
|
Fix reported |
|
| Gitea: Public-only repository tokens can update private PR head branchesCVE-2026-58443 · GHSA-XXJV-752H-3VP2 |
code.gitea.io/giteagitea.dev |
GoRed Hat |
Critical
|
Fix reported |
|
| Gitea: Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot accessCVE-2026-58438 · GHSA-XV9X-FJ9G-VJ6HVersion ranges need review. |
gitea.devOpenShift Pipelines/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9 |
GoRed Hat |
Low
|
Fix reported |
|
| Gitea: Denial of Service via Unbounded io.ReadAll in NPM Package Tag EndpointCVE-2026-42931 · GHSA-WWQQ-X6W4-FRM2 |
code.gitea.io/giteagitea.dev |
Go |
Medium
|
Fix reported |
|
| Gitea LFS Deploy-Key Privilege EscalationCVE-2026-58435 · GHSA-RH79-75QM-GWJR |
code.gitea.io/giteagitea.dev |
Go |
Medium
|
Fix reported |
|
| Gitea: REST API exposes organization membership of private organizations to publicCVE-2026-58417 · GHSA-JR5X-6H83-WRXFVersion ranges need review. |
gitea.devOpenShift Pipelines/openshift-pipelines-client |
GoRed Hat |
Medium
|
Fix reported |
|
| Gitea Remember-Me Token Theft Not Invalidating Attacker SessionCVE-2026-56750 · GHSA-RGV6-XP99-6MGJ |
code.gitea.io/giteagitea.dev |
GoRed Hat |
Critical
|
Fix reported |
|
| Gitea: draft release attachment disclosure via missing web authorizationCVE-2026-58432 · GHSA-Q9PG-JJ6X-J9P6 |
code.gitea.io/giteagitea.dev |
GoRed Hat |
Medium
|
Fix reported |
|
| Gitea: SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURLCVE-2026-58441 · GHSA-XMJ7-XJ85-HFC3 |
code.gitea.io/giteagitea.dev |
Go |
Medium
|
Fix reported |
|
| Gitea: Private org member list leaked via /members API endpoint — incomplete fix for PR #38145CVE-2026-58427 · GHSA-PRR9-9MP4-5GP2Version ranges need review. |
gitea.devOpenShift Pipelines/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9 |
GoRed Hat |
Medium
|
Fix reported |
|
| Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->privateCVE-2026-58510 · GHSA-Q423-49RW-G9MH |
code.gitea.io/giteagitea.dev |
Go |
Medium
|
Fix reported |
|
| Gitea: Repository migration SSRF via multi-answer DNS allow-list bypassCVE-2026-58442 · GHSA-H2X6-G7Q6-344V |
code.gitea.io/giteagitea.dev |
Go |
Medium
|
Fix reported |
|
| Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times`CVE-2026-59766 · GHSA-QF2F-QH6P-7V89 |
code.gitea.io/giteagitea.dev |
Go |
Medium
|
Fix reported |
|
| Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of ServiceCVE-2026-55984 · GHSA-M932-CRVM-GCP5 |
code.gitea.io/giteagitea.dev |
Go |
Low
|
Fix reported |
|
