CVE-2026-73539

Gitea built external-renderer commands by substituting "$GITEAPREFIXSRC" / "$GITEAPREFIXRAW" with a URL derived from the caller-controlled markup "Context" field, then split that string with "go-shellquote.Split" and passed the result to "exec.CommandContext". The markup handler assigned the bran...