Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,127 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-73539 | 7.5 High | Gitea external renderer argument injection and code execution | Oct 14, 2026 |
| CVE-2026-73535 | 8.8 High | Gitea second-factor bypass through OpenID identity linking | Oct 14, 2026 |
| CVE-2026-73273 | 4.3 Medium | Gitea Maven checksum upload quota bypass and memory exhaustion | Oct 14, 2026 |
| CVE-2026-73135 | 5.3 Medium | Gitea hidden-owner repository listing disclosure | Oct 14, 2026 |
| CVE-2026-73130 | 4.3 Medium | Gitea repository initialization resource exhaustion | Oct 14, 2026 |
| CVE-2026-73126 | 4.3 Medium | Gitea private workflow badge token scope bypass | Oct 14, 2026 |
| CVE-2026-71301 | 4.3 Medium | Gitea private pull request title disclosure through markup | Oct 14, 2026 |
| CVE-2026-71184 | 8.8 High | Gitea fork workflow approval bypass through review events | Oct 14, 2026 |
| CVE-2026-70407 | 4.3 Medium | Gitea organization listing token scope bypass | Oct 14, 2026 |
| CVE-2026-70406 | 6.5 Medium | Gitea private comparison disclosure with public-only tokens | Oct 14, 2026 |
| CVE-2026-70402 | 5.8 Medium | Gitea local code execution through writable Git hooks | Oct 14, 2026 |
| CVE-2026-70400 | 5.4 Medium | Gitea private migration creation with public-only tokens | Oct 14, 2026 |
| CVE-2026-70396 | 5.4 Medium | Gitea organization repository creation token scope bypass | Oct 14, 2026 |
| CVE-2026-68964 | 4.3 Medium | Gitea restricted-user SSH and GPG key metadata disclosure | Oct 14, 2026 |
| CVE-2026-68957 | 4.3 Medium | Gitea restricted-user issue search disclosure | Oct 14, 2026 |
| CVE-2026-67577 | 4.3 Medium | Gitea restricted-user activity and heatmap disclosure | Oct 14, 2026 |
| CVE-2026-66877 | 8.1 High | Gitea fork workflow approval bypass through concurrency cancellation | Oct 14, 2026 |
| CVE-2026-66874 | 6.5 Medium | Gitea required Actions check bypass through skipped workflows | Oct 14, 2026 |
| CVE-2026-66853 | 4.3 Medium | Gitea restricted-user organization metadata disclosure | Oct 14, 2026 |
| CVE-2026-66849 | 4.3 Medium | Gitea restricted-user package visibility bypass | Oct 14, 2026 |
| CVE-2026-84471 | 7.2 High | The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during… | Oct 14, 2026 |
| CVE-2026-63792 | 5.3 Medium | Gitea private reusable workflow disclosure to fork runs | Oct 14, 2026 |
| CVE-2026-63021 | 6.5 Medium | Gitea Swift package manifest memory exhaustion | Oct 14, 2026 |
| CVE-2026-62925 | 6.5 Medium | Gitea Alpine package parsing memory exhaustion | Oct 14, 2026 |
| CVE-2026-60021 | 6.5 Medium | Gitea GitLab migration denial of service | Oct 14, 2026 |
| CVE-2026-60018 | 6.5 Medium | Gitea OneDev migration denial of service | Oct 14, 2026 |
| CVE-2026-60010 | 6.5 Medium | Gitea organization team policy bypass through repository API | Oct 14, 2026 |
| CVE-2026-60008 | 3.5 Low | Gitea Jupyter notebook UI redress through CSS class injection | Oct 14, 2026 |
| CVE-2026-59774 | 9.8 Critical | Gitea Org-mode file disclosure and code execution | Oct 14, 2026 |
| CVE-2026-59766 | 4.3 Medium | Gitea private repository metadata disclosure after access revocation | Oct 14, 2026 |
| CVE-2026-25946 | 5.3 Medium | Gitea OpenID discovery server-side request forgery | Oct 14, 2026 |
| CVE-2026-110650 | 9.3 Critical | Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths | Oct 14, 2026 |
| CVE-2026-110649 | 9.3 Critical | Stills before 25.24.2 OS Command Injection via Media File Names | Oct 14, 2026 |
| CVE-2026-110648 | 8.5 High | @offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Names | Oct 14, 2026 |
| CVE-2026-110647 | 8.5 High | Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Names | Oct 14, 2026 |
| CVE-2026-110646 | 9.2 Critical | Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl() | Oct 14, 2026 |
| CVE-2026-110645 | 9.3 Critical | Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut() | Oct 14, 2026 |
| CVE-2026-110644 | 9.3 Critical | nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType | Oct 14, 2026 |
| CVE-2026-110643 | 9.3 Critical | transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath | Oct 14, 2026 |
| CVE-2026-110642 | 8.5 High | xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name | Oct 14, 2026 |
| CVE-2026-110641 | 8.7 High | @runnerty/executor-decompress through 3.1.1 OS Command Injection via Archive File Name | Oct 14, 2026 |
| CVE-2026-110640 | 9.3 Critical | Whisper-node through 1.1.1 OS Command Injection via filePath and language | Oct 14, 2026 |
| CVE-2026-110639 | 9.3 Critical | @mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir | Oct 14, 2026 |
| CVE-2026-110638 | 9.3 Critical | doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path | Oct 14, 2026 |
| CVE-2026-110637 | 8.5 High | buildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Name | Oct 14, 2026 |
| CVE-2026-110636 | 9.3 Critical | pypdftk through 0.5 OS Command Injection via PDF and Output Paths | Oct 14, 2026 |
| CVE-2026-110635 | 9.3 Critical | webp-converter before 3.0.0 OS Command Injection via File Names and Options | Oct 14, 2026 |
| CVE-2026-110634 | 9.3 Critical | git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings | Oct 14, 2026 |
| CVE-2026-110633 | 8.5 High | MyReport Updater through 2.1.1 Local Privilege Escalation via Updater Service | Oct 14, 2026 |
| CVE-2026-110632 | 9.2 Critical | Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE | Oct 14, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.