Tag: gitea
Gitea code injection lands on CISA urgent list after miner attacks
CISA flags a critical Gitea code injection bug that attackers are using to drop crypto miners on exposed servers.
Gitea patch blocks RCE that turned patches into git hooks
CVE-2026-60004 lets a repository writer plant a git hook and run commands as the Gitea service account.
One missing header is all it takes to own a Gitea Docker instance
Attackers are actively exploiting CVE-2026-20896, a critical Gitea Docker authentication bypass that grants full repository access with a single HTTP…