Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...
7.5CVSS0.00431EPSS
SaveExploits0References4
EUVD•added 2026/07/03 8:19 p.m.•11 views
EUVD-2026-41637
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...
