Tag: CVE-2026-60004
Gitea code injection lands on CISA urgent list after miner attacks
CISA flags a critical Gitea code injection bug that attackers are using to drop crypto miners on exposed servers.
Gitea patch blocks RCE that turned patches into git hooks
CVE-2026-60004 lets a repository writer plant a git hook and run commands as the Gitea service account.