Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsRequired field in glTF files rendered by the 3D file viewer.
2026年9月4日
CVE-2026-28737 [HIGH] – Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the ext
📑 文章目录



