Advisories · Technology
Gitea Open Source Git Server.
Every CVE that names Gitea Open Source Git Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Gitea runner registration-token GET endpoint performs a write under a read-only token scope
- Gitea Open Source Git Server
- Privilege escalation
- CVSS 9.1 CriticalCritical · CVSS 9+
Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)
- Gitea Open Source Git Server
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting
- Gitea Open Source Git Server
- Broken access control
- CVSS 5.4 Medium
Email Management API Bypasses ManageCredentials Feature Restrictions
- Gitea Open Source Git Server
- Broken access control