CVE-2026-57894

CVE-2026-57894 : In Gitea, repository migration can follow Git HTTP redirects after URL allow/block validation, enabling potential internal Git repository exfiltration. Affected: Gitea (Git-related migration logic); Root cause: improper handling of redirects during migration, per NVD/CVE descript...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the repository migration and mirror synchronization process. An attacker can access internal Git repositories and exfiltrate sensitive data by submitting a crafted migration URL that causes the server...