Gitea

Gitea — diffpatch API Git Hook Remote Code Execution (CVE-2026-60004) new KEV EPSS 85%CVE-2026-60004webHIGH 8.8Patched2026-08-09Gitea Docker Image Reverse-Proxy Authentication Bypass — "One Header, Any User" (CVE-2026-20896) newCVE-2026-20896webCRITICAL 9.8Patched2026-07-11Gitea OAuth2 Scope Enforcement Bypass via HTTP Basic Auth — CVE-2026-28699 newCVE-2026-28699webHIGHPatched2026-07-05Gitea Container Registry Anonymous Auth Bypass (CVE-2026-27771) newCVE-2026-27771webCRITICALPatched2026-07-05Gitea act_runner container.options Host Namespace Escape newNone assigned as of 2026-07-03cloudHIGHUnverified2026-07-03