#Gitea

2 tutorials tagged with "Gitea"

CVE-2026-20896: The Gitea Docker Flaw That Takes One Header to Own Your Server

A critical Docker image default in Gitea lets attackers gain admin access with a single HTTP header. Here's how CVE-2026-20896 works, how to check if you're vulnerable, and how to fix it in five minutes.

docker

Critical Gitea Docker Vulnerability (CVE-2026-20896): Patch Your Self-Hosted Git Server Now

A CVSS 9.8 critical vulnerability in Gitea Docker images allows attackers to impersonate any user via reverse proxy misconfiguration. The flaw is under active exploitation. Here's how to check if you're affected and patch immediately.

docker