GO-2026-6344 Gitea LFS mirror operations bypass migration HTTP transport protections in code.gitea.io/gitea
Gitea LFS mirror operations bypass migration HTTP transport protections in code.gitea.io/gitea...
5.7AI score0.00652EPSS
SaveExploits0References8
EUVD•added 2026/07/03 8:19 p.m.•20 views
EUVD-2026-41630
Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror operations, bypassing the configured migration transport protections for those LFS requests...