CVE-2026-28705
Vulnerability Description
Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-22
Source
NVD
Vendor
Gitea
Product
Gitea Open Source Git Server
Discussion (0)
Add Comment
No comments yet. Be the first!