VENDOR

Gitea vulnerabilities: CVEs, exploitation and patches

Every Gitea CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-60004
Gitea code injection via diffpatch API remote code execution Gitea Gitea · Sep 29, 2026
- CISA KEV
- EXPLOITED
- PoC PUBLIC
- PATCH AVAILABLE
CRITICAL 9.8