CVE-2026-78231 Gitea blind SSRF through OpenID assertion verification

When OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endpoint during verification. An attacker controls the destination and much of the form body, allowing interaction with internal HTTP services...

CVE-2026-78231

The Gitea platform is vulnerable to a blind Server-Side Request Forgery (SSRF) via its OpenID sign-in verification flow. When OpenID sign-in is enabled, the application processes unauthenticated GET requests to "/user/login/openid" and passes attacker-controlled assertion parameters into the Open...