UNKNOWN Go
Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata in gitea.dev
GO-2026-6039 · CVE-2026-34966 · CVE-2026-59765 · GHSA-2wm4-vwp6-v7xc
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata in gitea.dev
Ready to move
Start Securing
Free, no credit card | First findings in minutes