CVE-2026-26307

Gitea versions prior to 1.25.5 are vulnerable to a Denial of Service (DoS) attack because they do not enforce a timeout on git grep searches. An attacker can initiate expensive or long-running search operations to exhaust server resources, potentially making the service unavailable to legitimate ...

CVE-2026-26307 Gitea git grep search lacks a timeout

Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expensive searches to consume server resources...