Resource exhaustion in Gitea Open Source Git Server

CVE-2026-26307

Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expensive searches to consume server resources.

Vulnerability class: DoS (Denial of Service)