CVE-2026-60018: Gitea 1.16.0 to before 1.27.3

Affected technology

Gitea · 1.16.0 to before 1.27.3
Gitea

Description’s affected range: version response into memory without a size limit and uses a client without a timeout

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.