← All credits
https://github.com/DshtAnger
11 vulnerability records and advisories credit this contributor.
CVE-2026-120263
Gitea OAuth2 account auto-linking takeover through the sign-up form
CVE-2026-118395
Gitea public-only token bypass in repository and organization creation
CVE-2026-119625
Gitea user and organization feed token scope bypass
CVE-2026-109553
Gitea SSH certificate principal impersonation of other users
CVE-2026-97859
Gitea API disclosure of private user social graph, keys and stars
CVE-2026-73800
Gitea reusable workflow secret exposure in pull_request_target
CVE-2026-73539
Gitea external renderer argument injection and code execution
CVE-2026-62925
Gitea Alpine package parsing memory exhaustion
CVE-2026-63021
Gitea Swift package manifest memory exhaustion
CVE-2026-104632
Gitea fork workflow approval bypass through cancel and rerun