Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Insufficient LoggingCVE-2026-58437
Affects gitea.dev/routers/private | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Exposure of Private Personal Information to an Unauthorized ActorCVE-2026-58510
Affects gitea.dev/services/repository | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Exposure of Private Personal Information to an Unauthorized ActorCVE-2026-58510
Affects gitea.dev/routers/private | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Exposure of Private Personal Information to an Unauthorized ActorCVE-2026-58510
Affects gitea.dev/routers/api/v1/org | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Exposure of Private Personal Information to an Unauthorized ActorCVE-2026-58510
Affects gitea.dev/modules/web/middleware | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Exposure of Private Personal Information to an Unauthorized ActorCVE-2026-58510
Affects gitea.dev/models/repo | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Exposure of Private Personal Information to an Unauthorized ActorCVE-2026-58510
Affects gitea.dev/routers/api/v1/repo | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-58314
Affects gitea.dev/modules/hostmatcher | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-58314
Affects gitea.dev/modules/auth/openid | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58443
Affects gitea.dev/routers/web/user | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58443
Affects gitea.dev/routers/web/auth | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58443
Affects gitea.dev/routers/api/v1/shared | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58443
Affects gitea.dev/routers/web/user/setting | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58443
Affects gitea.dev/routers/api/v1 | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58443
Affects gitea.dev/routers/web/repo | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58443
Affects gitea.dev/routers/web | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58443
Affects gitea.dev/routers/api/v1/user | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58443
Affects gitea.dev/routers/api/packages/npm | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58443
Affects gitea.dev/routers/api/packages | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58443
Affects gitea.dev/routers/api/v1/repo | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • H
Directory TraversalCVE-2025-9566
Affects go.podman.io/podman/v6/pkg/domain/infra/abi | Versions *
No fix available
GoPublished 14 Sept 2026
  • L
Binding to an Unrestricted IP AddressCVE-2026-72924
Affects github.com/cli/cli/v2/cmd/gh | Versions >=2.28.0 <2.98.0
Has fix
GoPublished 14 Sept 2026
  • M
Path EquivalenceCVE-2026-14978
Affects github.com/hashicorp/go-slug/internal/ignorefiles | Versions >=0.4.0 <0.18.3
Has fix
GoPublished 14 Sept 2026
  • C
Arbitrary Code InjectionCVE-2026-86242
Affects github.com/maximhq/bifrost/transports/bifrost-http/server | Versions <2.0.0
Has fix
GoPublished 14 Sept 2026
  • C
Arbitrary Code InjectionCVE-2026-86242
Affects github.com/maximhq/bifrost/framework/plugins | Versions <2.0.0
Has fix
GoPublished 14 Sept 2026
  • C
Arbitrary Code InjectionCVE-2026-86242
Affects github.com/maximhq/bifrost/transports/bifrost-http/handlers | Versions <2.0.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-58416
Affects gitea.dev/models/perm/access | Versions <1.27.0-rc0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-56443
Affects gitea.dev/services/context | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Incorrect AuthorizationCVE-2026-56443
Affects gitea.dev/routers/api/v1 | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-59765
Affects gitea.dev/routers/web/auth | Versions <1.27.0
Has fix
GoPublished 14 Sept 2026