CVE-2026-60004: Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

Description

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

Affected Products

References

• https://blog.gitea.com/release-of-1.27.1/
• https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m
• https://www.runzero.com/blog/gitea/
• https://github.com/0xBlackash/CVE-2026-60004

Related News (4 articles)