CVE-2026-73130

Summary The "gitignores" field of the repository-creation form and API option struct has no maximum-length constraint. During repository initialization the field is split on commas and each name triggers a template read whose result is buffered in memory before ".gitignore" is written. A large...