CVE-2026-60021: Gitea 1.16.0 to before 1.27.3

Affected technology

Gitea · 1.16.0 to before 1.27.3
Gitea

Description’s affected range: version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.