Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation.
2026年9月4日
CVE-2026-27779 [HIGH] – Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when dete
📑 文章目录



