Skip to content
Threat Feed
Subscribe

Vendor

Gitea Ltd

3 briefs RSS
high advisory

Gitea OAuth Callback Re-enables Administrator-Disabled Accounts

An improper authorization vulnerability in Gitea's OAuth2 sign-in callback mechanism (CVE-2026-58422) allows users with linked external identity providers to unilaterally re-enable their administrator-disabled accounts, regaining full access and bypassing security controls.

Gitea improper-authorization oauth account-takeover persistence vulnerability
2t 1c
high advisory

Gitea Server-Side Request Forgery Vulnerabilities

Two Server-Side Request Forgery (SSRF) vulnerabilities in Gitea version 1.26.2 and earlier allow authenticated users to bypass IP filtering for webhooks and repository migrations by targeting CGNAT and IPv6 transition prefixes, and unauthenticated users to trigger arbitrary GET requests against internal hosts via the OpenID sign-in form, potentially leading to internal network discovery and data exposure.

Gitea <= 1.26.2 ssrf gitea web-vulnerability internal-reconnaissance
1r 3t 1i
critical advisory

Gitea Incomplete SSRF Protection in Webhook and Migration Allow-list

An incomplete Server-Side Request Forgery (SSRF) protection in Gitea versions prior to 1.26.3 allows authenticated users to bypass the allow-list in webhook delivery and repository migrations, enabling internal network probing and data exfiltration from sensitive services like cloud metadata endpoints.

Gitea ssrf web-application data-exfiltration vulnerability github authorization-bypass information-disclosure api +5
4t 1c 1i