Affected by GO-2025-4261 and 30 other vulnerabilities

GO-2025-4261: Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea

GO-2026-5081: Gitea: Missing repository-unit authorization on issue-template API endpoints in code.gitea.io/gitea

GO-2026-5243: Gitea: Incomplete CVE-2025-68941 fix: /user/orgs missing checkTokenPublicOnly + switch-case logic flaw in code.gitea.io/gitea

GO-2026-5286: Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer in code.gitea.io/gitea

GO-2026-5299: Gitea: OAuth2 access token scope enforcement bypass via HTTP Basic authentication in code.gitea.io/gitea

GO-2026-5321: Gitea: Git Smart HTTP Skips Repository Token Scopes for Bearer Tokens in code.gitea.io/gitea

GO-2026-5334: Gitea: Token scope bypass on web archive download endpoint in code.gitea.io/gitea

GO-2026-5365: Gitea: API Fork Missing CanCreateOrgRepo Check Allows Org Secret Exfiltration in code.gitea.io/gitea

GO-2026-5448: Gitea: Open Redirect via redirect_to in code.gitea.io/gitea

GO-2026-5510: Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo in code.gitea.io/gitea

GO-2026-5721: Gitea: Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes in code.gitea.io/gitea

GO-2026-6017: Gitea has insufficient permission checks for Composer package source links in code.gitea.io/gitea

GO-2026-6029: Gitea: Git LFS object reuse allows non-Code access to authorize private source objects in code.gitea.io/gitea

GO-2026-6030: Gitea: Incomplete SSRF Protection in Webhook and Migration Allow-list Default Filter in code.gitea.io/gitea

GO-2026-6031: Gitea: API access token scope enforcement bypass on repository RSS/Atom feed endpoints leaks private repository commit data in code.gitea.io/gitea

GO-2026-6041: Gitea: Notification API leaks private issue metadata after access revocation in code.gitea.io/gitea

GO-2026-6043: Gitea: Cached Per-Branch Permission Check in Pre-Receive Hook Allows Full Repository Write in code.gitea.io/gitea

GO-2026-6044: Gitea: Permanent Fork PR Workflow Approval Gate Bypass in code.gitea.io/gitea

GO-2026-6046: Gitea: LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories in code.gitea.io/gitea

GO-2026-6051: Gitea Docker image: `REVERSE_PROXY_TRUSTED_PROXIES = *` default lets any source IP impersonate any user via `X-WEBAUTH-USER` in code.gitea.io/gitea

GO-2026-6056: Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts in code.gitea.io/gitea

GO-2026-6057: Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface in code.gitea.io/gitea

GO-2026-6060: Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write in code.gitea.io/gitea

GO-2026-6074: Gitea: API Fork Endpoint Authorization Bypass Allows Organization Members to Bypass Repository Creation Restrictions in code.gitea.io/gitea

GO-2026-6075: Gitea: SSRF via HTTP Redirect in Repository Migration in code.gitea.io/gitea

GO-2026-6076: Gitea: Unauthorized Access to Labels of Private Organizations in code.gitea.io/gitea

GO-2026-6077: Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service in code.gitea.io/gitea

GO-2026-6080: Gitea: Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag in go-gitea/gitea

GO-2026-6081: Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private in code.gitea.io/gitea

GO-2026-6346: Gitea pre-receive hook scanner errors allow branch-protection bypass in code.gitea.io/gitea

GO-2026-6433: Gitea: Remote Code Execution via diffpatch Git Hook Installation in gitea.dev

sync

package

v1.25.5 Latest Latest Go to latest Published: Mar 13, 2026 License: MIT Imports: 2 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/go-gitea/gitea

Documentation ¶

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type StatusTable ¶

type StatusTable struct {
	// contains filtered or unexported fields
}

StatusTable is a table maintains true/false values.

This table is particularly useful for un/marking and checking values in different goroutines.

func NewStatusTable ¶

func NewStatusTable() *StatusTable

NewStatusTable initializes and returns a new StatusTable object.

func (*StatusTable) IsRunning ¶

func (p *StatusTable) IsRunning(name string) bool

IsRunning checks if value of given name is set to true in the pool.

func (*StatusTable) Start ¶

func (p *StatusTable) Start(name string)

Start sets value of given name to true in the pool.

func (*StatusTable) StartIfNotRunning ¶ added in v1.2.0

func (p *StatusTable) StartIfNotRunning(name string) bool

StartIfNotRunning sets value of given name to true if not already in pool. Returns whether set value was set to true

func (*StatusTable) Stop ¶

func (p *StatusTable) Stop(name string)

Stop sets value of given name to false in the pool.

Source Files ¶

View all Source files

status_pool.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL