CVE-2026-58508

No fix known EPSS <1%CVSS 9.1

Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)

Published 2026-08-13 · CVE record · OSV

Products: Gitea Open Source Git Server