Improper input validation in Gitea Open Source Git Server
CVE-2026-22547
Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Affected products
- Gitea Open Source Git Server — versions 0
Weakness classification (CWE)
References
- 88ee5874-cf24-4952-aea0-31affedb7ff2 (patch)
- 88ee5874-cf24-4952-aea0-31affedb7ff2 (patch)
- 88ee5874-cf24-4952-aea0-31affedb7ff2 (release-notes)
- 88ee5874-cf24-4952-aea0-31affedb7ff2 (release-notes)