[CVE-2026-22874] Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration a…

Descripción técnica

Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration allow-list filtering.

Puntuación CVSS

Score: 9.6/10 — Severidad: CRITICAL — Estado NIST: Deferred

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Debilidades (CWE)

CWE-918

Fuente oficial

Publicado en NIST NVD.