Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check.
2026年9月4日
CVE-2026-26247 [CRITICAL] – Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctl
📑 文章目录
