Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Information Exposure
CVE-2026-58419
Affects
gitea.dev/routers/web/feed
| Versions
>=1.26.2 <1.26.3
M
Information Exposure
CVE-2026-58419
Affects
gitea.dev/services/convert
| Versions
>=1.26.2 <1.26.3
M
Information Exposure
CVE-2026-58419
Affects
gitea.dev/modules/git
| Versions
>=1.26.2 <1.26.3
H
Server-side Request Forgery (SSRF)
CVE-2026-58418
Affects
gitea.dev/modules/git
| Versions
<1.26.4
H
Server-side Request Forgery (SSRF)
CVE-2026-58418
Affects
gitea.dev/routers/web/feed
| Versions
<1.26.4
H
Server-side Request Forgery (SSRF)
CVE-2026-58418
Affects
gitea.dev/services/convert
| Versions
<1.26.4
M
Authorization Bypass Through User-Controlled Key
CVE-2026-28740
Affects
gitea.dev/models/git
| Versions
>=1.0.0 <1.26.3
M
Incorrect Authorization
CVE-2026-27780
Affects
gitea.dev/cmd
| Versions
<1.26.0-rc0
M
Access Control Bypass
CVE-2026-27779
Affects
gitea.dev/modules/httplib
| Versions
<1.25.5
H
Cross-site Scripting (XSS)
CVE-2026-28737
Affects
gitea.dev/routers/web/repo
| Versions
>=1.25.0 <1.26.0
H
Cross-site Scripting (XSS)
CVE-2026-28737
Affects
gitea.dev/modules/public
| Versions
>=1.25.0 <1.26.0
H
Cross-site Scripting (XSS)
CVE-2026-28737
Affects
gitea.dev/modules/markup
| Versions
>=1.25.0 <1.26.0
H
Cross-site Scripting (XSS)
CVE-2026-28737
Affects
gitea.dev/models/renderhelper
| Versions
>=1.25.0 <1.26.0
H
Directory Traversal
CVE-2026-28705
Affects
gitea.dev/services/migrations
| Versions
<1.25.5
M
Access Control Bypass
CVE-2026-20909
Affects
gitea.dev/services/convert
| Versions
<1.25.5
M
Replay Attack
CVE-2026-26232
Affects
gitea.dev/routers/web/auth
| Versions
<1.25.5
M
Replay Attack
CVE-2026-26232
Affects
gitea.dev/models/auth
| Versions
<1.25.5
M
Incorrect Authorization
CVE-2026-27775
Affects
gitea.dev/services/repository
| Versions
>=1.25.5 <1.26.3
M
Incorrect Authorization
CVE-2026-27775
Affects
gitea.dev/services/auth
| Versions
>=1.25.5 <1.26.3
M
Incorrect Authorization
CVE-2026-27775
Affects
gitea.dev/routers
| Versions
>=1.25.5 <1.26.3
M
Incorrect Authorization
CVE-2026-27775
Affects
gitea.dev/models/auth
| Versions
>=1.25.5 <1.26.3
M
Incorrect Authorization
CVE-2026-27761
Affects
gitea.dev/modules/git
| Versions
<1.26.3
M
Incorrect Authorization
CVE-2026-27761
Affects
gitea.dev/routers/web/feed
| Versions
<1.26.3
M
Incorrect Authorization
CVE-2026-27761
Affects
gitea.dev/services/convert
| Versions
<1.26.3
H
Authorization Bypass Through User-Controlled Key
CVE-2026-27657
Affects
gitea.dev/routers/web/user/setting
| Versions
<1.25.5
H
Authorization Bypass Through User-Controlled Key
CVE-2026-27657
Affects
gitea.dev/models/user
| Versions
<1.25.5
C
Access Control Bypass
CVE-2026-20896
Affects
gitea.dev/routers
| Versions
<1.26.3
C
Access Control Bypass
CVE-2026-20896
Affects
gitea.dev/models/auth
| Versions
<1.26.3
C
Access Control Bypass
CVE-2026-20896
Affects
gitea.dev/services/auth
| Versions
<1.26.3
C
Access Control Bypass
CVE-2026-20896
Affects
gitea.dev/services/repository
| Versions
<1.26.3