Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

go-gitea/gitea

              main @ 550efdc
            

350

Fixes

CVEs

CRITICAL

Peak severity

35.3%

Coverage

Highlights

Auth Bypass: 155 prior fixes. Scrutinize any change in this area.

routers/api/v1/api.go: most-fixed (10 issues). Treat as high-risk during review.

116 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: Improperly sanitized user-supplied strings or branch names could be interpreted as CLI options in git execution, potentially leading to command injection (CVE-2022-42968).

Auth Bypass: Draft release and issue attachments could be accessed or associated without validating repository read/write permissions or matching owner IDs (CVE-2026-20912).

Path Traversal: Relative path sequences in repository migration files, templates, or options could escape base directories during extraction or generation.