Affected by GO-2025-4261
and 5 other vulnerabilities
GO-2025-4261 : Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea
GO-2026-6041 : Gitea: Notification API leaks private issue metadata after access revocation in code.gitea.io/gitea
GO-2026-6056 : Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts in code.gitea.io/gitea
GO-2026-6075 : Gitea: SSRF via HTTP Redirect in Repository Migration in code.gitea.io/gitea
GO-2026-6077 : Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service in code.gitea.io/gitea
GO-2026-6080 : Gitea: Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag in go-gitea/gitea
Discover Packages
code.gitea.io/gitea
modules
glob
package
Version:
v1.26.3
Opens a new window with list of versions in this module.
Published: Jun 20, 2026
License: MIT
Opens a new window with license information.
Imports: 4
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
Documentation
¶
Source Files
¶
Click to show internal directories.
Click to hide internal directories.