CVE-2026-73539

A flaw was found in Gitea. This vulnerability allows an attacker to achieve arbitrary code execution by injecting unintended arguments into external markup rendering commands. When handling markup requests, Gitea fails to sanitize URL reference paths before command argument processing. If an...