Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Critical9.8Gitea Code Injection VulnerabilityCVE-2026-60004 · Gitea · Gitea · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 24.0%Aug 19, 2026
High7.5Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataCVE-2026-34966 · CVE.org · FIRST EPSS · GitHub Advisory Database · GoEPSS 0.4%Jul 21, 2026
UnknownGitea Gitea Improper Access ControlCVE-2026-20896 · Gitea · Gitea Open Source Git Server · VulnCheck KEVKEVJul 6, 2026
Medium5.3In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.CVE-2025-69413 · gitea · gitea · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Jan 1, 2026