Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2021-45326 — HIGH severity vulnerability | Release Alert

CVE-2021-45326

8.8

HIGHCVSS v3

Published

February 8, 2022

CVSS v2

6.8 MEDIUM

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.

GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD

< 1.5.2NVD

Docker HubGitea: Git with a cup of tea - A painless self-hosted Git service.

< 1.5.2NVD

More on this CVE

NVD↗GitHub Advisory↗

Chocolatey

Gitea is a lightweight code hosting solution written in Go and published under the MIT license.

< 1.5.2NVD

Crates.ioA Gitea client for Rust programs.

< 1.5.2NVD

NPMJavaScript API for Gitea.

< 1.5.2NVD

GitLabGit with a cup of tea, painless self-hosted git service https://gitea.com

< 1.5.2NVD