← All credits
https://github.com/wxiaoguang
27 vulnerability records and advisories credit this contributor.
CVE-2026-118386
Gitea Actions fork workflow trust through pull request review commit
CVE-2026-117685
Gitea public-only package token access to private OCI blobs
CVE-2026-109553
Gitea SSH certificate principal impersonation of other users
CVE-2026-107618
Gitea cross-site request forgery on repository topics
CVE-2026-107686
Gitea reactions accepted on locked issues and comments
CVE-2026-110494
Gitea release attachment re-linking of issue attachments
CVE-2026-104627
Gitea OpenID account linking without session binding
CVE-2026-97204
Gitea label deletion across repository and organization IDs
CVE-2026-110311
Gitea draft release creation disclosing attachment metadata
CVE-2026-105661
Gitea panic on the repositories route of individual users