Security Advisory
CVE-2026-27779
7.5
HIGH
Vulnerability Description
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation.
Published Date
July 3, 2026
Official Source
NIST NVD Advisory