CVE-2026-78231

Summary When OpenID sign-in is enabled, Gitea accepts an unauthenticated GET request to "/user/login/openid" and passes attacker-controlled OpenID assertion parameters into the OpenID 2.0 verification flow. During verification, the upstream "github.com/yohcop/openid-go" library sends a server-sid...