CVE-2026-89430

Gitea validated a push mirror's remote address against the migrations allow and block lists only when the mirror was created. Each synchronization passed the stored address directly to git push, so a name that later resolved to a blocked or internal address was still reached. A user with...

EUVD-2026-93912

Gitea validated a push mirror's remote address against the migrations allow and block lists only when the mirror was created. Each synchronization passed the stored address directly to git push, so a name that later resolved to a blocked or internal address was still reached. A user with...

CVE-2026-89430

Gitea validated a push mirror's remote address against the "migrations" allow and block lists only when the mirror was created. Each synchronization passed the stored address directly to "git push", so a name that later resolved to a blocked or internal address was still reached. A user with...

CVE-2026-89430

Gitea validated a push mirror's remote address against the migrations allow and block lists only when the mirror was created. Each synchronization passed the stored address directly to git push, so a name that later resolved to a blocked or internal address was still reached. A user with...

PT-2026-107218

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea only validated a push mirror's remote address against the migrations allow and block lists during the initial creation of the mirror. Subsequent synchronizations passed the stored address...