← All credits
https://github.com/bircni
23 vulnerability records and advisories credit this contributor.
CVE-2026-97626
Gitea profile feed disclosure bypassing user visibility
CVE-2026-97208
Gitea push mirror API bypass of DISABLE_NEW_PUSH policy
CVE-2026-96594
Gitea repository media API stored XSS
CVE-2026-96589
Gitea private repository access retained after rejected transfer
CVE-2026-96580
Gitea Actions memory exhaustion through large static matrices
CVE-2026-96400
Gitea migration SSRF to reserved addresses through ALLOWED_DOMAINS
CVE-2026-94205
Gitea fork workflow approval bypass through maintainer-triggered events
CVE-2026-89430
Gitea push mirror SSRF and forced writes to internal Git hosts
CVE-2026-89182
Gitea push-to-create bypass of FORCE_PRIVATE policy
CVE-2026-86684
Gitea push mirror local path check uses the repository owner