CVEs published by Gitea Limited

CVEs published by Gitea Limited (CVE Numbering Authority). 2 tracked.

• CVE-2026-59765 HIGH 7.5 SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata
• CVE-2026-59763 MEDIUM 4.3 Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

← Back to latest CVEs