Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,732All CVEsplus 19,114 rejected
- 440Last 24 hours2,861 in the last 7 days
- 17,141Last 30 days1,582 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 27 | 59 | 81 | 7 | 20 | 194 | 195 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2024 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-119627 | Gitea limited-visibility profile disclosure with public-only tokensGitea · Gitea | Not scored |
| CVE-2026-119625 | Gitea user and organization feed token scope bypassGitea · Gitea | Not scored |
| CVE-2026-119533 | Gitea private pull request disclosure on project boardsGitea · Gitea | Not scored |
| CVE-2026-119441 | Gitea public-only token bypass on bulk organization repository deletionGitea · Gitea | Not scored |
| CVE-2026-118504 | Gitea issue changes on archived repositories through the APIGitea · Gitea | Not scored |
| CVE-2026-118395 | Gitea public-only token bypass in repository and organization creationGitea · Gitea | Not scored |
| CVE-2026-118394 | Gitea OAuth2 userinfo private group disclosure to public-only tokensGitea · Gitea | Not scored |
| CVE-2026-117685 | Gitea public-only package token access to private OCI blobsGitea · Gitea | Not scored |
| CVE-2026-117677 | Gitea Helm chart upload decompression denial of serviceGitea · Gitea | Not scored |
| CVE-2026-117649 | Gitea private issue disclosure through issue dependency timeline eventsGitea · Gitea | Not scored |
| CVE-2026-117646 | Gitea private repository listing to public-only tokens on profilesGitea · Gitea | Not scored |
| CVE-2026-117635 | Gitea admin API public-only token scope bypassGitea · Gitea | Not scored |
| CVE-2026-116474 | Gitea Actions job token spoofing of instance-signed commitsGitea · Gitea | Not scored |
| CVE-2026-116296 | Gitea archived repository release, milestone and label modificationGitea · Gitea | Not scored |
| CVE-2026-116289 | Gitea public-only token bypass through Actions runner registrationGitea · Gitea | Not scored |
| CVE-2026-114199 | Gitea contribution heatmap private activity disclosure to public-only tokensGitea · Gitea | Not scored |
| CVE-2026-113429 | Gitea stored XSS through legacy Actions artifact Content-EncodingGitea · Gitea | Not scored |
| CVE-2026-112887 | Gitea Actions task token private repository enumerationGitea · Gitea | Not scored |
| CVE-2026-120263 | Gitea OAuth2 account auto-linking takeover through the sign-up formGitea · Gitea | Not scored |
| CVE-2026-118386 | Gitea Actions fork workflow trust through pull request review commitGitea · Gitea | Not scored |
| CVE-2026-97859 | Gitea API disclosure of private user social graph, keys and starsGitea · Gitea | Medium6.5 |
| CVE-2026-97204 | Gitea label deletion across repository and organization IDsGitea · Gitea | Low3.1 |
| CVE-2026-110494 | Gitea release attachment re-linking of issue attachmentsGitea · Gitea | Medium6.3 |
| CVE-2026-110324 | Gitea private profile information disclosure through POST requestGitea · Gitea | Medium6.5 |
| CVE-2026-110311 | Gitea draft release creation disclosing attachment metadataGitea · Gitea | Medium4.3 |
| CVE-2026-109844 | Gitea watched repositories API disclosure after access revocationGitea · Gitea | Medium4.3 |
| CVE-2026-107686 | Gitea reactions accepted on locked issues and commentsGitea · Gitea | Medium4.3 |
| CVE-2026-107618 | Gitea cross-site request forgery on repository topicsGitea · Gitea | High8.1 |
| CVE-2026-105964 | Gitea Actions artifact v4 API unbounded request bodyGitea · Gitea | Medium6.5 |
| CVE-2026-105661 | Gitea panic on the repositories route of individual usersGitea · Gitea | Medium5.3 |
| CVE-2026-109553 | Gitea SSH certificate principal impersonation of other usersGitea · Gitea | High7.5 |
| CVE-2026-104627 | Gitea OpenID account linking without session bindingGitea · Gitea | Medium5.4 |
| CVE-2026-78433 | Gitea private attachment disclosure through repository mismatchGitea · Gitea | Medium5.9 |
| CVE-2026-78231 | Gitea blind SSRF through OpenID assertion verificationGitea · Gitea | Medium5.3 |
| CVE-2026-73814 | Gitea repository ownership escalation by administratorsGitea · Gitea | Medium6.5 |
| CVE-2026-73804 | Gitea API token scope escalation through HTTP signaturesGitea · Gitea | High8.1 |
| CVE-2026-73802 | Gitea Runner host isolation bypass through container optionsGitea · Gitea Runner | High8.8 |
| CVE-2026-73800 | Gitea reusable workflow secret exposure in pull_request_targetGitea · Gitea | High8.8 |
| CVE-2026-73539 | Gitea external renderer argument injection and code executionGitea · Gitea | High7.5 |
| CVE-2026-73535 | Gitea second-factor bypass through OpenID identity linkingGitea · Gitea | High8.8 |
| CVE-2026-73273 | Gitea Maven checksum upload quota bypass and memory exhaustionGitea · Gitea | Medium4.3 |
| CVE-2026-73135 | Gitea hidden-owner repository listing disclosureGitea · Gitea | Medium5.3 |
| CVE-2026-73130 | Gitea repository initialization resource exhaustionGitea · Gitea | Medium4.3 |
| CVE-2026-73126 | Gitea private workflow badge token scope bypassGitea · Gitea | Medium4.3 |
| CVE-2026-71301 | Gitea private pull request title disclosure through markupGitea · Gitea | Medium4.3 |
| CVE-2026-71184 | Gitea fork workflow approval bypass through review eventsGitea · Gitea | High8.8 |
| CVE-2026-70407 | Gitea organization listing token scope bypassGitea · Gitea | Medium4.3 |
| CVE-2026-70406 | Gitea private comparison disclosure with public-only tokensGitea · Gitea | Medium6.5 |
| CVE-2026-70402 | Gitea local code execution through writable Git hooksGitea · Gitea | Medium5.8 |
| CVE-2026-70400 | Gitea private migration creation with public-only tokensGitea · Gitea | Medium5.4 |