← All credits
https://github.com/bircni
23 vulnerability records and advisories credit this contributor.
CVE-2026-96400
Gitea migration SSRF to reserved addresses through ALLOWED_DOMAINS
CVE-2026-94205
Gitea fork workflow approval bypass through maintainer-triggered events
CVE-2026-89430
Gitea push mirror SSRF and forced writes to internal Git hosts
CVE-2026-89182
Gitea push-to-create bypass of FORCE_PRIVATE policy
CVE-2026-86684
Gitea push mirror local path check uses the repository owner
CVE-2026-70357
Gitea repository migration SSRF through DNS rebinding
CVE-2026-105267
Gitea tag delete route deletes releases without release permission
CVE-2026-104636
Gitea SSRF through Git HTTP redirects in mirrors and fetches
CVE-2026-104632
Gitea fork workflow approval bypass through cancel and rerun
CVE-2026-104626
Gitea fork workflow job revival through later approval