CVE-2026-57894

CVE-2026-57894 affects Gitea releases around 1.27.x where repository migrations (web/API) can cause internal Git repo exfiltration via HTTP redirects. The reported root cause is that Gitea validates the initially submitted migration URL (allowed by policy) but then delegates the actual clone/fetc...