Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-58508

Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)

Description

Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gitea Gitea Open Source Git Server

Default version status: unaffected

  • 0 to ≤ 1.26.4affected

References