CVE catalog
All CVEs

CVE-2026-60004

Gitea remote code execution in diffpatch API via Git hooks

critical · 9.8
Known exploited
Fix listed

Gitea

Published

Description

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

Reported fixed versions

1.27.1

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.