Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-60004

Fixed in a distro release ExploitedEPSS 24%CVSS 9.8

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

Published 2026-08-26 · In CISA KEV since 2026-08-25 · CVE record · OSV

Products: Gitea

Fixed upstream

EcosystemPackageFixed in
Gocode.gitea.io/giteano fix
Gogitea.dev1.27.1

Distro releases

ReleasePackageFixed in
Chainguardgitea1.27.1-r0
Chainguardgitea-fips1.27.1-r0
SUSE Linux Enterprise Server 16.0govulncheck-vulndb0.0.20260916T180043-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0govulncheck-vulndb0.0.20260916T180043-160000.1.1
Wolfigitea1.27.1-r0
openSUSE Leap 16.0govulncheck-vulndb0.0.20260916T180043-160000.1.1