| Package | Affected versions | Patched versions |
|---|---|---|
| code.gitea.io/gitea | < 1.26.2 | 1.26.2 |
Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.
A critical vulnerability has been discovered in Gitea. It was already reported via ([email protected]) from ([email protected]), and submitted an encrypted report.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free