CVE-2026-120991

The Gitea platform is vulnerable to a flaw where rejected container blob uploads (e.g., due to exceeding size quotas) incorrectly trigger a cleanup process that deletes shared content. If a user uploads a blob with content identical to another user's package layer, the system removes the shared b...