CVE-2026-58441

SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...

CVE-2026-58441

A Server-Side Request Forgery (SSRF) vulnerability exists in Gitea within the restore-repo functionality. The root cause is the processing of an unsanitized pull_request.yml Head.CloneURL parameter. This vulnerability was addressed in Gitea version 1.27.0 . Specific exploit details are not provid...

CVE-2026-58441 SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL

SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...

EUVD-2026-58168

SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...

CVE-2026-58441 SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL

SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...

CVE-2026-58441 SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL

SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...

CVE-2026-58441: Server-Side Request Forgery (SSRF)

SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...

SUSE CVE-2026-58441

SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via the uri.Open function. An attacker can read arbitrary files from the server filesystem by supplying a crafted archive with a release.yml containing a DownloadURL field using the file:// scheme...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via the uri.Open function. An attacker can read arbitrary files from the server filesystem by supplying a crafted archive with a release.yml containing a DownloadURL field using the file:// scheme...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via the uri.Open function. An attacker can read arbitrary files from the server filesystem by supplying a crafted archive with a release.yml containing a DownloadURL field using the file:// scheme...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via the uri.Open function. An attacker can read arbitrary files from the server filesystem by supplying a crafted archive with a release.yml containing a DownloadURL field using the file:// scheme...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the restore-repo when parsing the pullrequest.yml file. An attacker can cause the server to initiate network requests to arbitrary URLs or disclose local git repositories by supplying a crafted...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the restore-repo when parsing the pullrequest.yml file. An attacker can cause the server to initiate network requests to arbitrary URLs or disclose local git repositories by supplying a crafted...