Gitea has released version 28.0.0, addressing 20 vulnerabilities spanning authentication bypass, unauthorized workflow execution, server-side request forgery, and access-control failures. Published ...

Hackers are actively exploiting a critical Gitea remote code execution vulnerability, tracked as CVE-2026-60004, to compromise internet-facing source-code management servers. Researchers found that a ...

Anatomy of CVE-2026-60004: exploiting Gitea’s patch workflow During routine threat hunting, Acronis Threat Research Unit (TRU) identified a Linux implant, which we track as JITTERLY, and traced it to ...

Github — отличная площадка, подарившая удаленные репозитории всем и каждому, стала центром опенсорса, упростила cicd создав удобные actions ...

擔心錯過重要的資安新聞嗎？資安日報與資安週報即日起推出免費電子報訂閱，每天每週直送資安要聞，提供專業、易懂、便於轉述的最佳中文資安情報，助你掌握全球與臺灣最新資安脈動。

Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver.

Attackers have planted cryptocurrency-mining malware on real development servers by exploiting CVE-2026-60004, a CVSS 9.8 code-injection flaw in Gitea — and the U.S. Cybersecurity and Infrastructure ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability ...

A critical vulnerability in Gitea, tracked as CVE-2026-59774, allows unauthenticated remote attackers to read arbitrary files on vulnerable servers and potentially escalate to remote code execution ...

Gitea, a lightweight and open-source Git hosting platform designed for simplicity and ease of self-hosting, has released version 1.27. A key change in this release is improved handling of reusable ...