CVE-2026-58442

CVE-2026-58442 (Gitea) — A vulnerability in the repository-migration flow allows SSRF via DNS multi-answer responses. The issue resides in the migration allow/block-list check (services/migrations/migrate.go). When an attacker-controlled hostname resolves to multiple IPs, the code marks ipAllowed...