Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-28705
5.3
MEDIUMCVSS v3
Published
July 3, 2026
Affected
1 project
Assigned by
88ee5874-cf24-4952-aea0-31affedb7ff2
Severity scale
010
Description
Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths.
go-gitea/gitea
GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
GitHubGit with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CDNVD