CVE-2026-73539

Gitea is vulnerable to argument injection and remote code execution due to a failure to escape the reference path when substituting a URL derived from the markup Context field into external renderer command templates. The root cause lies in routers/common/markup.go, where the branch path is assig...