Gitea security advisory (AV26-845) - Update 1
Cybersecurity Classified by Officially
Serial Number: AV26-845
Date: August 25, 2026
Updated: October 20, 2026
As of August 14, 2026, Gitea is affected by vulnerabilities in the following product:
- Gitea
- Prior to 1.27.1
Update 1
Open-source reporting indicates that CVE-2026-20896 is being exploited in the wild.
On August 25, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-60004 to their Known Exploited Vulnerabilities (KEV) Database.
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
This is an extract. The publication continues at the source.
Source: Canadian Centre for Cyber Security. Licence
Read the original at the source: https://cyber.gc.ca/en/alerts-advisories/gitea-security-advisory-av26-845
Officially imported this from Canadian Centre for Cyber Security’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.
Provenance
- Organization
- Canadian Centre for Cyber Security — imported from official source
- Official source
- https://www.cyber.gc.ca/api/cccs/rss/v1/get?feed=alerts_advisories&lang=en ATOM
- Imported
- October 20, 2026 18:00
- Versions
- 1 recorded
- Identity
-
https://cyber.gc.ca/en/alerts-advisories/gitea-security-advisory-av26-845