// tag
Gitea
Security incidents tagged Gitea. Newest first.
- incidents
- 1
- live
- 0
- patched
- 1
## 1 Gitea incident in the last year
through Oct 22, 2026crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
show 1 older incident1 older incident
August 2026 1
highGitea Gitea: Gitea Code Injection Vulnerabilitypatched
› Gitea Gitea patched
Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea service account. Added to CISA KEV on 2026-08-25.
open incident →CVE-2026-60004
