CVE-2026-57894

The Gitea repository management tool is vulnerable to Server-Side Request Forgery (SSRF) via the Clone() function in modules/git/repo.go. The issue arises because the software follows Git HTTP redirects even after initial URL allow/block validation, which can lead to internal git repository exfil...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the repository migration and mirror synchronization process. An attacker can access internal Git repositories and exfiltrate sensitive data by submitting a crafted migration URL that causes the server...