Veille CVE

Mardi 25 août 2026

1 CVE

  1. CVE-2026-60004 – Non évaluée Exploitée

    Gitea Gitea

    Gitea Code Injection Vulnerability — Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea service account.