GI
Product
Gitea
by Gitea · last CVE Oct 18, 2026
On CISA KEVExploited in the wild
132
CVEs
1
On KEV
10.0
Max CVSS
77
New 30D
Severity mix
Critical 18High 36Medium 75Low 3
Watch

Add Gitea to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-60008
3.5
0%
Oct 14
Gitea Jupyter notebook UI redress through CSS class injection
Affected: 1.27.0 through 1.27.1
CVE-2026-0798
3.5
0%
Jan 22
Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocation
Affected: before 1.25.4
CVE-2026-97204
3.1
0%
Oct 18
Gitea label deletion across repository and organization IDs
Affected: through 28.1.0
Showing 3