6 matches found
CVE-2026-58441
SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...
CVE-2026-58441 SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL
SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...
CVE-2026-58441 SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL
SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...
CVE-2026-58441 SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL
SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...
CVE-2026-58441
CVE-2026-58441 : Gitea exposes an SSRF vulnerability in the restore-repo feature via an unsanitized pull_request.yml Head.CloneURL. The issue is triggered when the application processes a repository pull_request configuration, allowing an attacker with limited access to induce the server to fetch...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the restore-repo when parsing the pullrequest.yml file. An attacker can cause the server to initiate network requests to arbitrary URLs or disclose local git repositories by supplying a crafted...