gitea security

The gitea security tag covers vulnerabilities and patching guidance for the Gitea self-hosted Git service, including installations on Windows. Recent content highlights CVE-2026-60004, a critical code-injection flaw leading to remote code execution, which CISA added to its Known Exploited Vulnerabilities catalog amid active attacks. The tag emphasizes the importance of upgrading to Gitea 1.27.1 or later, treating exposed systems with registration enabled as potential incident-response cases, and understanding that KEV inclusion signals real-world exploitation. Discussions focus on practical steps for administrators, such as applying patches promptly and assessing exposure, rather than theoretical risks. This tag serves as a resource for staying informed about Gitea-specific security advisories and response actions.