Approved changes feed: RSS · Atom
cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gitea (eaa7e9b8-383b-5ece-9dae-e8930725e404) |
|---|---|
| Product | Gitea (29e2eaf1-5af6-5b23-bb58-ef576da9062f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/go-gitea/gitea |
purl2cpe | 2026-06-01 10:11:27.298510 |
pkg:sourceforge/gitea.mirror |
purl2cpe | 2026-06-01 10:11:27.298512 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-69413 |
vulnerable | 2026-06-08 07:43:13.589040 |
Details available
MEDIUM (5.3)
In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on whether a username exists.
Published: 2026-01-01T04:39:48.140Z
Updated: 2026-01-05T19:56:03.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68946 |
vulnerable | 2026-06-08 07:41:21.964388 |
Details available
MEDIUM (5.4)
In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.
Published: 2025-12-26T04:14:03.775Z
Updated: 2025-12-26T18:59:45.647Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68945 |
vulnerable | 2026-06-08 07:41:21.963968 |
Details available
MEDIUM (5.8)
In Gitea before 1.21.2, an anonymous user can visit a private user's project.
Published: 2025-12-26T03:58:46.724Z
Updated: 2025-12-26T18:59:29.985Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68944 |
vulnerable | 2026-06-08 07:41:21.963718 |
Details available
MEDIUM (5)
Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries.
Published: 2025-12-26T03:37:28.693Z
Updated: 2025-12-26T19:28:23.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68943 |
vulnerable | 2026-06-08 07:41:21.963462 |
Details available
MEDIUM (5.3)
Gitea before 1.21.8 inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order.
Published: 2025-12-26T03:19:45.242Z
Updated: 2025-12-26T19:28:57.206Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68942 |
vulnerable | 2026-06-08 07:41:21.963202 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68941 |
vulnerable | 2026-06-08 07:41:21.962725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68940 |
vulnerable | 2026-06-08 07:41:21.962425 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68939 |
vulnerable | 2026-06-08 07:41:21.956854 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68938 |
vulnerable | 2026-06-08 07:41:21.956413 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3515 |
vulnerable | 2026-06-08 06:09:39.757071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42968 |
vulnerable | 2026-06-08 05:49:31.009670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38795 |
vulnerable | 2026-06-08 05:47:17.429817 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38183 |
vulnerable | 2026-06-08 05:47:16.009922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30781 |
vulnerable | 2026-06-08 05:43:39.723173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1928 |
vulnerable | 2026-06-08 05:39:14.233645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1058 |
vulnerable | 2026-06-08 05:39:12.085625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0905 |
vulnerable | 2026-06-08 05:39:11.458101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45331 |
vulnerable | 2026-06-08 05:36:48.035954 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45330 |
vulnerable | 2026-06-08 05:36:48.035661 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45329 |
vulnerable | 2026-06-08 05:36:48.035381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45328 |
vulnerable | 2026-06-08 05:36:48.035047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45327 |
vulnerable | 2026-06-08 05:36:48.034629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45326 |
vulnerable | 2026-06-08 05:36:48.034166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45325 |
vulnerable | 2026-06-08 05:36:48.033620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3382 |
vulnerable | 2026-06-08 05:33:51.240119 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29134 |
vulnerable | 2026-06-08 05:31:25.873851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28378 |
vulnerable | 2026-06-08 05:31:24.155666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28991 |
vulnerable | 2026-06-08 05:23:56.715634 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14144 |
vulnerable | 2026-06-08 05:18:02.083727 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13246 |
vulnerable | 2026-06-08 05:18:00.401281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11576 |
vulnerable | 2026-06-08 05:12:37.678190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11229 |
vulnerable | 2026-06-08 05:12:36.678078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11228 |
vulnerable | 2026-06-08 05:12:36.676325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010314 |
vulnerable | 2026-06-08 05:12:21.796388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010261 |
vulnerable | 2026-06-08 05:12:21.754874 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1000002 |
vulnerable | 2026-06-08 05:12:21.331648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18926 |
vulnerable | 2026-06-08 05:11:14.966317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15192 |
vulnerable | 2026-06-08 05:10:53.885997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000803 |
vulnerable | 2026-06-08 05:10:25.968098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.