CVE-2026-78231

The Gitea platform is vulnerable to a blind Server-Side Request Forgery (SSRF) via its OpenID sign-in verification flow. When OpenID sign-in is enabled, the application processes unauthenticated GET requests to "/user/login/openid" and passes attacker-controlled assertion parameters into the Open...