Vulnerabilities (CVE)

Filtered by vendor Gitea Subscribe
Filtered by product Gitea
Total 81 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-1000803 1 Gitea 1 Gitea 2026-06-17 5.0 MEDIUM 5.3 MEDIUM
Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses. This attack appear to be exploitable via Watch a repository to receive email notifications. Emails received contain the other recipients even if they have the email set as private. This vulnerability appears to have been fixed in 1.5.1.