CVE-2026-56755

Denial of Service CPU & Memory Exhaustion via ON^2 String Concatenation in Debian Package Upload...

CVE-2026-56755

Summary: CVE-2026-56755 is a DoS vulnerability in Gitea related to Denial of Service (CPU and memory exhaustion) caused by O(N^2) string concatenation during Debian package upload. The vulnerability is exploitable locally (attack vector: LOCAL) and is described with an impact of high availability...

CVE-2026-56755 Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload

Denial of Service CPU & Memory Exhaustion via ON^2 String Concatenation in Debian Package Upload...

CVE-2026-56755

creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:27+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-6hm7-3pwj-22rm 2026-08-14 12:45:21+00:00| seen|...