Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Access Control BypassCVE-2026-26247
Affects gitea.dev/routers/web/auth | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Denial of Service (DoS)CVE-2026-26307
Affects gitea.dev/modules/git | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Symlink AttackCVE-2026-25718
Affects gitea.dev/services/repository | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Symlink AttackCVE-2026-25718
Affects gitea.dev/modules/util | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-25782
Affects gitea.dev/routers/api/v1/repo | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-25782
Affects gitea.dev/routers/web/repo | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-25782
Affects gitea.dev/models/issues | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Improper Input ValidationCVE-2026-22547
Affects gitea.dev/services/forms | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Improper Input ValidationCVE-2026-22547
Affects gitea.dev/services/repository | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Improper Input ValidationCVE-2026-22547
Affects gitea.dev/modules/structs | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Replay AttackCVE-2026-20779
Affects gitea.dev/services/auth | Versions >=1.5.0 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • H
Replay AttackCVE-2026-20779
Affects gitea.dev/services/repository | Versions >=1.5.0 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • H
Replay AttackCVE-2026-20779
Affects gitea.dev/routers | Versions >=1.5.0 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • H
Replay AttackCVE-2026-20779
Affects gitea.dev/models/auth | Versions >=1.5.0 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-25712
Affects gitea.dev/routers/api/v1/org | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Missing AuthorizationCVE-2026-27771
Affects gitea.dev/models/user | Versions <1.26.2
Has fix
GoPublished 7 Jul 2026
  • H
Missing AuthorizationCVE-2026-27771
Affects gitea.dev/routers/api/packages/composer | Versions <1.26.2
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-26292
Affects gitea.dev/services/mirror | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Sensitive Cookie in HTTPS Session Without "Secure" AttributeCVE-2026-11956
Affects github.com/twin/gatus/v5/security | Versions >=0.0.0
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-27660
Affects gitea.dev/routers/api/v1/repo | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-24690
Affects gitea.dev/services/pull | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-22874
Affects gitea.dev/modules/hostmatcher | Versions <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-24451
Affects gitea.dev/services/auth | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-24451
Affects gitea.dev/services/repository | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-24451
Affects gitea.dev/routers | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-24451
Affects gitea.dev/models/auth | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Missing AuthorizationCVE-2026-25038
Affects gitea.dev/routers | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Missing AuthorizationCVE-2026-25038
Affects gitea.dev/services/repository | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Missing AuthorizationCVE-2026-25038
Affects gitea.dev/services/auth | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Missing AuthorizationCVE-2026-25038
Affects gitea.dev/models/auth | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026