CVE-2026-59765 SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata

SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata...

CVE-2026-59765

CVE-2026-59765 affects Gitea (pre-1.27.0) where SSRF can occur via Migration Asset Downloads, bypassing hostmatcher and enabling reads of internal files and cloud metadata. Public advisories link to GHSA-2wm4-vwp6-v7xc and the 1.27.0 release notes, confirming affected code paths used for migratio...

GO-2026-6039 Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata in gitea.dev

Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata in gitea.dev...