CVE-2026-59765

SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata...

CVE-2026-59765 SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata

SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata...

CVE-2026-59765

CVE-2026-59765 affects Gitea (pre-1.27.0) where SSRF can occur via Migration Asset Downloads, bypassing hostmatcher and enabling reads of internal files and cloud metadata. Public advisories link to GHSA-2wm4-vwp6-v7xc and the 1.27.0 release notes, confirming affected code paths used for migratio...

CVE-2026-59765 SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata

SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata...

CVE-2026-59765

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:07+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-2wm4-vwp6-v7xc...