How many code.gitea.io code.gitea.io/gitea CVEs are in CISA KEV?

None of code.gitea.io code.gitea.io/gitea's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of code.gitea.io code.gitea.io/gitea are affected?

76 distinct code.gitea.io code.gitea.io/gitea versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in code.gitea.io code.gitea.io/gitea CVEs?

code.gitea.io code.gitea.io/gitea's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-863 (Incorrect Authorization), CWE-918 (Server-Side Request Forgery (SSRF)).

How many critical code.gitea.io code.gitea.io/gitea vulnerabilities are there?

code.gitea.io code.gitea.io/gitea has 13 critical and 33 high-severity CVEs.

What is the average severity of code.gitea.io code.gitea.io/gitea CVEs?

The average CVSS base score across code.gitea.io code.gitea.io/gitea's scored CVEs is 6.5.

code.gitea.io code.gitea.io/gitea Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: code.gitea.io code.gitea.io/gitea vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

code.gitea.io code.gitea.io/gitea Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

code.gitea.io code.gitea.io/gitea has 103 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 58 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting code.gitea.io code.gitea.io/gitea, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of code.gitea.io code.gitea.io/gitea's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical13

High33

Medium48

Low9

In CISA’s Known Exploited Vulnerabilities catalog

None of code.gitea.io code.gitea.io/gitea's CVEs are currently listed in CISA's KEV catalog.

Public exploits

58 of code.gitea.io code.gitea.io/gitea's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every code.gitea.io code.gitea.io/gitea version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.27.036 CVEs
< 1.25.49 CVEs
< 1.26.27 CVEs
< 1.26.37 CVEs
< 1.26.44 CVEs
< 1.16.42 CVEs
< 1.16.92 CVEs
< 1.22.22 CVEs
< 1.25.22 CVEs
< 1.26.02 CVEs
< 1.11.21 CVE
< 1.12.01 CVE

Common weakness types

The CWE weakness categories most often found in code.gitea.io code.gitea.io/gitea CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many code.gitea.io code.gitea.io/gitea CVEs were published each year.

2018

2019

2020

2021

2022

2023

2024

Other code.gitea.io products

Browse vulnerabilities for other products by code.gitea.io.

All code.gitea.io vulnerabilities

Frequently asked questions

Common questions about code.gitea.io code.gitea.io/gitea vulnerabilities.

How many CVEs does code.gitea.io code.gitea.io/gitea have?: code.gitea.io code.gitea.io/gitea has 103 published CVE records since 2018.
How many code.gitea.io code.gitea.io/gitea CVEs are in CISA KEV?: None of code.gitea.io code.gitea.io/gitea's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for code.gitea.io code.gitea.io/gitea vulnerabilities?: Yes — 58 of code.gitea.io code.gitea.io/gitea's CVEs have a known public exploit.
Which versions of code.gitea.io code.gitea.io/gitea are affected?: 76 distinct code.gitea.io code.gitea.io/gitea versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in code.gitea.io code.gitea.io/gitea CVEs?: code.gitea.io code.gitea.io/gitea's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-863 (Incorrect Authorization), CWE-918 (Server-Side Request Forgery (SSRF)).
How many critical code.gitea.io code.gitea.io/gitea vulnerabilities are there?: code.gitea.io code.gitea.io/gitea has 13 critical and 33 high-severity CVEs.
What is the average severity of code.gitea.io code.gitea.io/gitea CVEs?: The average CVSS base score across code.gitea.io code.gitea.io/gitea's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track code.gitea.io code.gitea.io/gitea vulnerabilities

Monitor new code.gitea.io code.gitea.io/gitea vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing