How many Gitea go-gitea/gitea CVEs are in CISA KEV?

None of Gitea go-gitea/gitea's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Gitea go-gitea/gitea are affected?

8 distinct Gitea go-gitea/gitea versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Gitea go-gitea/gitea CVEs?

Gitea go-gitea/gitea's CVEs most often map to these CWE weakness types: CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization).

What is the average severity of Gitea go-gitea/gitea CVEs?

The average CVSS base score across Gitea go-gitea/gitea's scored CVEs is 5.8.

Gitea go-gitea/gitea Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Gitea go-gitea/gitea vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Gitea go-gitea/gitea Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Gitea go-gitea/gitea has 4 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 5.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Gitea go-gitea/gitea, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Gitea go-gitea/gitea's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Gitea go-gitea/gitea's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4 of Gitea go-gitea/gitea's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Gitea go-gitea/gitea version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.16.41 CVE
< 1.16.51 CVE
< 1.16.91 CVE
< 1.19.41 CVE

Fixed in

1.16.41 CVE
1.16.51 CVE
1.16.91 CVE
1.19.41 CVE

Find a version

4 CVEs

Sort

code.gitea.io/gitea Open Redirect vulnerability
CVE-2023-3515
Public exploit
Patch
CWE-601
Medium · CVSS 4.4
EPSS 0.5% (41th pct)2023-07-05
Stored Cross-site Scripting in gitea
CVE-2022-1928
Public exploit
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.8% (55th pct)2022-05-29
Gitea Open Redirect
CVE-2022-1058
Public exploit
Patch
CWE-601
Medium · CVSS 6.1
EPSS 53.2% (99th pct)2022-03-24
Gitea Missing Authorization vulnerability
CVE-2022-0905
Public exploit
Patch
CWE-862
High · CVSS 7.1
EPSS 0.8% (57th pct)2022-03-10

Common weakness types

The CWE weakness categories most often found in Gitea go-gitea/gitea CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Gitea go-gitea/gitea CVEs were published each year.

2022

2023

Other Gitea products

Browse vulnerabilities for other products by Gitea.

gitea142 CVEs Gitea Open Source Git Server97 CVEs github.com/go-gitea/gitea20 CVEs gitea.dev9 CVEs act_runner1 CVEs

All Gitea vulnerabilities

Frequently asked questions

Common questions about Gitea go-gitea/gitea vulnerabilities.

How many CVEs does Gitea go-gitea/gitea have?: Gitea go-gitea/gitea has 4 published CVE records since 2022.
How many Gitea go-gitea/gitea CVEs are in CISA KEV?: None of Gitea go-gitea/gitea's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Gitea go-gitea/gitea vulnerabilities?: Yes — 4 of Gitea go-gitea/gitea's CVEs have a known public exploit.
Which versions of Gitea go-gitea/gitea are affected?: 8 distinct Gitea go-gitea/gitea versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Gitea go-gitea/gitea CVEs?: Gitea go-gitea/gitea's CVEs most often map to these CWE weakness types: CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization).
What is the average severity of Gitea go-gitea/gitea CVEs?: The average CVSS base score across Gitea go-gitea/gitea's scored CVEs is 5.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Gitea go-gitea/gitea vulnerabilities

Monitor new Gitea go-gitea/gitea vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing