Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownGitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the repository…EPSS 0.3%Oct 14, 2026
- UnknownWhen OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endpoint dur…EPSS 0.2%Oct 14, 2026
- UnknownGitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access.EPSS 0.2%Oct 14, 2026
- UnknownGitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account.EPSS 0.2%Oct 14, 2026
- UnknownGitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled.EPSS 0.2%Oct 14, 2026
- UnknownGitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event.EPSS 0.2%Oct 14, 2026
- UnknownGitea substitutes a URL derived from the markup Context field into external renderer command templates without escaping the reference path before shell-style argument splitting.EPSS 0.3%Oct 14, 2026
- UnknownGitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn verification before completing sign-in and linking an OpenID identifier.EPSS 0.2%Oct 14, 2026
- Medium4.3Gitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcing package-size quotas.EPSS 0.4%Oct 14, 2026
- Medium5.3Gitea uses inconsistent repository visibility predicates, and the condition used by some repository-listing endpoints admits repositories whose owners are hidden from the viewer.EPSS 0.4%Oct 14, 2026
- Medium4.3Gitea does not limit the length of the gitignores field accepted by repository-creation forms and the API.EPSS 0.4%Oct 14, 2026
- Medium4.3Gitea's Actions workflow status badge endpoint does not enforce repository-read scope or the public-only restriction on the token authenticating the request.EPSS 0.3%Oct 14, 2026
- Medium4.3Gitea's repository markup endpoint resolves same-repository pull request references without enforcing the viewer's Pull Requests permission.EPSS 0.3%Oct 14, 2026
- Medium4.3Gitea's organization-list API does not enforce the read:organization token scope.EPSS 0.3%Oct 14, 2026
- Medium6.5Gitea's shared comparison helper omits the token repository-access check used when updating pull requests.EPSS 0.3%Oct 14, 2026
- Medium5.8Gitea creates server-side Git hook directories and scripts with mode 0777 and relies on the process umask to restrict access.EPSS 0.2%Oct 14, 2026
- Medium5.4Gitea's repository migration API accepts a public-only token when the request specifies creation of a private repository.EPSS 0.4%Oct 14, 2026
- UnknownGitea's organization repository-creation API requires write:organization but omits the write:repository token scope enforced by other repository-creation routes.EPSS 0.3%Oct 14, 2026
- Medium4.3Gitea's user SSH and GPG key-list API endpoints omit the profile visibility check applied by their web equivalents.EPSS 0.4%Oct 14, 2026
- Medium4.3Gitea's API and web issue-search paths do not treat restricted accounts as anonymous viewers when evaluating Limited-visibility repository owners.EPSS 0.4%Oct 14, 2026
- Medium4.3Gitea's activity-feed and contribution-heatmap API handlers do not apply the profile visibility check for restricted accounts viewing Limited-visibility users.EPSS 0.4%Oct 14, 2026
- Medium6.5For pull request events, Gitea reads workflow definitions from the pull request head and posts a synthetic skipped status when workflow branch or path filters exclude execution.EPSS 0.3%Oct 14, 2026
- Medium4.3Gitea's user organization-list API includes Limited-visibility organizations for authenticated restricted accounts without applying the visibility restriction enforced…EPSS 0.4%Oct 14, 2026
- Medium4.3Gitea's package registry grants authenticated users read access to packages owned by Limited-visibility users without excluding restricted accounts.EPSS 0.4%Oct 14, 2026
- Medium5.3Gitea's collaborative-owner authorization path for reading cross-repository reusable workflows does not exclude fork pull request runs.EPSS 0.4%Oct 14, 2026
53 records · page 1 of 3
PreviousNext