| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-78433 | Gitea private attachment disclosure through repository mismatch | Gitea | Gitea | - | - | 2026-10-14 14:38:17 | Deep Dive |
| CVE-2026-78231 | Gitea blind SSRF through OpenID assertion verification | Gitea | Gitea | - | - | 2026-10-14 14:38:11 | Deep Dive |
| CVE-2026-73814 | Gitea repository ownership escalation by administrators | Gitea | Gitea | - | - | 2026-10-14 14:38:05 | Deep Dive |
| CVE-2026-73804 | Gitea API token scope escalation through HTTP signatures | Gitea | Gitea | - | - | 2026-10-14 14:38:00 | Deep Dive |
| CVE-2026-73802 | Gitea Runner host isolation bypass through container options | Gitea | Gitea Runner | - | - | 2026-10-14 14:37:55 | Deep Dive |
| CVE-2026-73800 | Gitea reusable workflow secret exposure in pull_request_target | Gitea | Gitea | - | - | 2026-10-14 14:37:50 | Deep Dive |
| CVE-2026-73539 | Gitea external renderer argument injection and code execution | Gitea | Gitea | - | - | 2026-10-14 14:37:44 | Deep Dive |
| CVE-2026-73535 | Gitea second-factor bypass through OpenID identity linking | Gitea | Gitea | - | - | 2026-10-14 14:37:39 | Deep Dive |
| CVE-2026-73273 | Gitea Maven checksum upload quota bypass and memory exhaustion | Gitea | Gitea | - | - | 2026-10-14 14:37:31 | Deep Dive |
| CVE-2026-73135 | Gitea hidden-owner repository listing disclosure | Gitea | Gitea | - | - | 2026-10-14 14:37:25 | Deep Dive |
| CVE-2026-73130 | Gitea repository initialization resource exhaustion | Gitea | Gitea | - | - | 2026-10-14 14:37:20 | Deep Dive |
| CVE-2026-73126 | Gitea private workflow badge token scope bypass | Gitea | Gitea | - | - | 2026-10-14 14:37:15 | Deep Dive |
| CVE-2026-71301 | Gitea private pull request title disclosure through markup | Gitea | Gitea | - | - | 2026-10-14 14:37:10 | Deep Dive |
| CVE-2026-71184 | Gitea fork workflow approval bypass through review events | Gitea | Gitea | - | - | 2026-10-14 14:37:05 | Deep Dive |
| CVE-2026-70407 | Gitea organization listing token scope bypass | Gitea | Gitea | - | - | 2026-10-14 14:36:59 | Deep Dive |
| CVE-2026-70406 | Gitea private comparison disclosure with public-only tokens | Gitea | Gitea | - | - | 2026-10-14 14:36:54 | Deep Dive |
| CVE-2026-70402 | Gitea local code execution through writable Git hooks | Gitea | Gitea | - | - | 2026-10-14 14:36:47 | Deep Dive |
| CVE-2026-70400 | Gitea private migration creation with public-only tokens | Gitea | Gitea | - | - | 2026-10-14 14:36:42 | Deep Dive |
| CVE-2026-70396 | Gitea organization repository creation token scope bypass | Gitea | Gitea | - | - | 2026-10-14 14:36:37 | Deep Dive |
| CVE-2026-68964 | Gitea restricted-user SSH and GPG key metadata disclosure | Gitea | Gitea | - | - | 2026-10-14 14:36:28 | Deep Dive |