PT-2026-63315

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Three code paths bypass the existing Server-Side Request Forgery SSRF protections by using raw http.Get instead of the validated hostmatcher.NewDialContext dialer. This allows an attacker to ma...