The Hacker News

Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure

CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled ...
Hosted on MSN

A Gitea container flaw just surfaced that lets anyone pull private container images from the cloud — more than 30,000 deployments have been wide open for almost four years

If your team runs a self-hosted Gitea instance with the built-in container registry turned on, there is a real chance that every private container image you have stored has been accessible to the open ...
techtimes

Gitea Flaw Left 30,000 Deployments’ Private Container Images Readable for 4 Years

A critical vulnerability in Gitea, the widely used open-source self-hosted Git platform, silently allowed any person on the internet to pull private container images from affected instances — no ...
Hosted on MSN

A Gitea container flaw just surfaced that lets anyone on the internet pull private container images — more than 30,000 deployments have been exposed for almost four years

For close to four years, a default configuration in Gitea’s built-in container registry has allowed anyone on the internet to pull private container images from exposed instances without ...