CVE-2026-103059

The Gitea built-in SSH server is vulnerable to an authentication bypass when START_SSH_SERVER is set to true. The root cause is the use of an SQL LIKE comparison to look up public keys, which performs case-insensitive matching on certain databases like SQLite . An attacker could exploit this by c...