Vulnerability advisory
GO-2026-6027
Gitea: Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration in gitea.dev
Also known as CVE-2026-57894GHSA-82f7-87hm-852x
Severity
Severity not reported.
Affected versions
gitea.dev Go
| Affected | Fixed in |
|---|---|
| All versions before 1.27.0 | 1.27.0 |
Description
Gitea: Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration in gitea.dev