Vulnerability Database · Go · Package report

github.com/go-gitea/gitea: vulnerability history, versions and safety

github.com/go-gitea/gitea is a package in the Go ecosystem. Vulert records 27 vulnerabilities for it across 120 releases, from Feb 2022 to Jun 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
27 vulnerabilities recorded C3 H5 M10 L2 U7
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
8 in the last 12 months

Most recent disclosure 17 Jun 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on github.com/go-gitea/gitea v1.8.3 i

Updated on 23 Oct 2026

Action needed: v1.8.3 has 25 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 60/100
  • Security Unfixed issues
  • Maintenance Slowing
  • Popularity Key ecosystem project
  • Community Active

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.8.3 — affected i
  • Vulnerabilities on record 27 over 4 years · 8 in the last year i
  • Latest disclosure 17 Jun 2026 i
  • Highest CVSS 9.8 i
  • With no published fix 0 i
  • Stars 58,625 i
  • OpenSSF scorecard 7/10 i
  • Last release 88 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/go-gitea/gitea, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.8.3 17 Jun 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.8.2 29 May 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.8.1 08 May 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.8.0 20 Apr 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.8.0-rc3 13 Apr 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.6 13 Apr 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.8.0-rc2 27 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.5 27 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v0.0.0-20190327093300-d578b71d61ee 27 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190327093300-d578b71d61ee 27 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190326195948-d056bf300ff5 26 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190326194117-b4941f707b0f 26 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190326000855-22d3d029e6f7 26 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190325215155-909feaafa7ca 25 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190325212317-d86f878b3e78 25 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190324090845-fb2ea06bb18f 24 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190322154116-b48be1958c83 22 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190322153849-ecce28f9dfaa 22 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190322023823-03e4db40cc09 22 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190321135306-57ecf0978766 21 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190321020616-6f2e1bd23ab7 21 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190321014056-6d345e00e602 21 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190321013854-91dcccf72d15 21 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190320164113-75601a8cbc7b 20 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190320163750-3bb123e90e84 20 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190320012749-b78cbbcaa25d 20 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319224013-f125330fcf89 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319215006-5c82ef098e9d 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319210440-359d3ed01dcc 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319210218-ce646fd04bc7 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.8.0-rc1 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319062655-f7f2f12b68b1 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319062455-99d919e83a1a 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319023320-b34996a62937 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319022943-cac9e6e76051 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319022907-d10a668ffc4e 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319022839-0b94f106f88a 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319022810-d1c982cb731a 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev.0.20190319022734-ba2f6a45c8ef 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.9.0-dev 19 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190318140023-ca463856377c 18 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190318135946-c151682fae3b 18 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190318125130-82fbc82b632a 18 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190318124901-d78bb1d56487 18 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190318003808-cd8cdbd9d29b 18 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190317192028-1155f1b02ddd 17 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190317191718-4a6b011b159b 17 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190317024704-b3ad5eb414c6 17 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190316031244-379289639e44 16 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190315165353-faf446b37257 15 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190315163902-e558f83407a2 15 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190315161801-4f74bad783c2 15 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190315155027-c55bdca562e8 15 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190315141909-583968f274b8 15 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190314160953-7780ea889071 14 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190313224943-d7542bfde3e4 13 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190313075020-91775c112570 13 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.4 13 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190312174704-202a8f6ed982 12 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190312022334-b2e9894988a8 12 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190311225341-663874e8bee2 11 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190311180100-50631b5ac3ea 11 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190311113748-7c205607b5c3 11 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190311113518-f9627ede3c98 11 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190311034458-4334fe754e4a 11 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190311025459-2315019fefb0 11 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190310215854-e0eb6514d2e6 10 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190310215636-dbab98c8e088 10 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190309211831-e836b8869bfb 09 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190309211545-f5cf9a8355c4 09 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190309162958-8fffb0616866 09 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190309110038-8211e01d9e6f 09 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190308202833-f7ffb190c663 08 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190308202547-96f1720d6907 08 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190308181546-5c69e31c22c5 08 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190308174326-062de8e86fa0 08 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190308174259-bd4be434ffcf 08 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190308164546-489419c330b6 08 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190308164250-e777c6bdc6f1 08 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190308015410-9d3732dfd512 08 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190307213025-9fd8b2621fb6 07 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190307201201-f2de5dc8c87b 07 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190307191642-01bd1fcd33a7 07 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190307191344-020075e12fe4 07 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190306005036-ad86b843e1d1 06 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190306004830-608781f8806a 06 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190305201801-6460cff22228 05 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190305201524-f80caa5a8cae 05 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190305143941-b257e0456b81 05 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190305031351-4512634604e1 05 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190305025252-f066bd2b3f53 05 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190305023452-19862699cd4f 05 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190303225724-141c58f5a635 03 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190302204451-8e202e28ad80 02 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190302130719-a5604b161100 02 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190301235714-b28e527a2bc6 01 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190301204152-afdc0ca41d01 01 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190301203930-c01fb4d09ee2 01 Mar 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190228221008-8e266c319333 28 Feb 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190228123153-4a2e92bcd106 28 Feb 2019 C2 H4 M10 L2 U7 MIT Yes Details →
v1.7.0-dev.0.20190228120947-4b7237b63ee4 28 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190228080431-1cf3fc3bc59e 28 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190228080142-c812ba7f8745 28 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190228035146-48c101affe78 28 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190228000444-525f03306f5b 28 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190227203225-25b6496f48c9 27 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.3 27 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190227193757-7548037a64fd 27 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190227172421-b1ffe7e47b77 27 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190227165832-a1214978b385 27 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190227165508-6cc11eccac3f 27 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190226231022-b03d780ccb9e 26 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190226230735-1142632f1acb 26 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190226142856-7afe81f28e53 26 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190225185647-594f59169129 25 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190225103939-795f6e04ad7e 25 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190225103704-d8d24a56195e 25 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190224210245-28fcbf33dc67 24 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190224161620-15ecc08475c4 24 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →
v1.7.0-dev.0.20190223104432-05143768d094 23 Feb 2019 C2 H4 M10 L2 U7 — Yes Details →

The newest 120 of 4,810 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 10
  • 2024 9
  • 2026 8

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 8 of the 27 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/go-gitea/gitea

The 5 most severe of 27 vulnerabilities recorded for this package

Search all 27 in the database →

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/go-gitea/gitea

Is github.com/go-gitea/gitea safe to use?

Vulert records 27 vulnerabilities for github.com/go-gitea/gitea in Go: 3 critical, 5 high, 10 medium and 2 low, plus 7 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/go-gitea/gitea's Vulert package health score?

Vulert scores github.com/go-gitea/gitea 60/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/go-gitea/gitea affected?

Yes. v1.8.3, the version you would install today, has 25 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/go-gitea/gitea have?

27 vulnerabilities are recorded for github.com/go-gitea/gitea in the Go ecosystem: 3 critical, 5 high, 10 medium and 2 low, plus 7 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/go-gitea/gitea vulnerabilities disclosed?

8 vulnerabilities were recorded for github.com/go-gitea/gitea in the last 12 months, and the oldest entry in this database dates to 09 Feb 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/go-gitea/gitea are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/go-gitea/gitea for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/go-gitea/gitea version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.