CVE catalog
All CVEs

CVE-2026-60004

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

critical · 9.8
Known exploited
Fix listed

Gitea

Published

Description

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

Reported fixed versions

1.27.1

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.