VDB
GO-2025-4261
GO-2025-4261
PUBLISHED
Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | gitea-fips | 0, 0 |
| code.gitea.io | gitea | 0, 0, 0 |
Timeline
- Dec 30, 2025 CVE Published
- Jun 19, 2026 CVE Updated
- Sep 1, 2026 Security Advisory