Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Improper Verification of Cryptographic SignatureCVE-2026-58426
Affects gitea.dev/routers/api/v1/repo | Versions >=1.22.0 <1.26.2
Has fix
GoPublished 7 Jul 2026
  • H
Access Control BypassCVE-2026-58422
Affects gitea.dev/services/auth/source/oauth2 | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • H
Access Control BypassCVE-2026-58422
Affects gitea.dev/routers/web/auth | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • H
Improper AuthorizationCVE-2026-58424
Affects gitea.dev/services/actions | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • H
Improper AuthorizationCVE-2026-58424
Affects gitea.dev/models/actions | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-58421
Affects gitea.dev/models/issues | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-58421
Affects gitea.dev/services/issue | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-58419
Affects gitea.dev/routers/web/feed | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-58419
Affects gitea.dev/services/convert | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Information ExposureCVE-2026-58419
Affects gitea.dev/modules/git | Versions >=1.26.2 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-58418
Affects gitea.dev/modules/git | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-58418
Affects gitea.dev/routers/web/feed | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-58418
Affects gitea.dev/services/convert | Versions <1.26.4
Has fix
GoPublished 7 Jul 2026
  • M
Authorization Bypass Through User-Controlled KeyCVE-2026-28740
Affects gitea.dev/models/git | Versions >=1.0.0 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-27780
Affects gitea.dev/cmd | Versions <1.26.0-rc0
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-27779
Affects gitea.dev/modules/httplib | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • H
Cross-site Scripting (XSS)CVE-2026-28737
Affects gitea.dev/routers/web/repo | Versions >=1.25.0 <1.26.0
Has fix
GoPublished 7 Jul 2026
  • H
Cross-site Scripting (XSS)CVE-2026-28737
Affects gitea.dev/modules/public | Versions >=1.25.0 <1.26.0
Has fix
GoPublished 7 Jul 2026
  • H
Cross-site Scripting (XSS)CVE-2026-28737
Affects gitea.dev/modules/markup | Versions >=1.25.0 <1.26.0
Has fix
GoPublished 7 Jul 2026
  • H
Cross-site Scripting (XSS)CVE-2026-28737
Affects gitea.dev/models/renderhelper | Versions >=1.25.0 <1.26.0
Has fix
GoPublished 7 Jul 2026
  • H
Directory TraversalCVE-2026-28705
Affects gitea.dev/services/migrations | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Access Control BypassCVE-2026-20909
Affects gitea.dev/services/convert | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Replay AttackCVE-2026-26232
Affects gitea.dev/routers/web/auth | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Replay AttackCVE-2026-26232
Affects gitea.dev/models/auth | Versions <1.25.5
Has fix
GoPublished 7 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-27775
Affects gitea.dev/services/repository | Versions >=1.25.5 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-27775
Affects gitea.dev/services/auth | Versions >=1.25.5 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-27775
Affects gitea.dev/routers | Versions >=1.25.5 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-27775
Affects gitea.dev/models/auth | Versions >=1.25.5 <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-27761
Affects gitea.dev/modules/git | Versions <1.26.3
Has fix
GoPublished 7 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-27761
Affects gitea.dev/routers/web/feed | Versions <1.26.3
Has fix
GoPublished 7 Jul 2026