Skip to content

Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata

Moderate severity GitHub Reviewed Published Jul 13, 2026 in go-gitea/gitea • Updated Jul 21, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts