Security Advisory

CVE-2026-26292

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-03 20:19:35

Last updated 2026-07-07 16:59:11

Assigner Gitea

CVSS score not scored

State PUBLISHED

Description

Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror operations, bypassing the configured migration transport protections for those LFS requests.

← Browse all CVEs View on cve.org ↗