Security Advisory

CVE-2026-22874

9.6
CRITICAL

Vulnerability Description

Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration allow-list filtering.
Published Date July 3, 2026
Official Source NIST NVD Advisory
Browse More Advisories