← All credits
https://github.com/bircni
23 vulnerability records and advisories credit this contributor.
CVE-2026-97208
Gitea push mirror API bypass of DISABLE_NEW_PUSH policy
CVE-2026-101023
Gitea OAuth2 refresh token grant accepts access tokens
CVE-2026-105267
Gitea tag delete route deletes releases without release permission
CVE-2026-97626
Gitea profile feed disclosure bypassing user visibility
CVE-2026-105268
Gitea issue attachment API allows changing comment attachments
CVE-2026-103670
Gitea trusted workflow cancellation by unapproved fork runs
CVE-2026-101027
Gitea migration SSRF through ALLOWED_DOMAINS address check bypass
CVE-2026-104633
Gitea migration memory exhaustion from zero page size
CVE-2026-96594
Gitea repository media API stored XSS
CVE-2026-96589
Gitea private repository access retained after rejected transfer