For close to four years, a default configuration in Gitea’s built-in container registry has allowed anyone on the internet to ...
Gitea vulnerability CVE-2026-27771 let anyone pull private container images from 30,000-plus self-hosted deployments with no ...