CISA Warns of Gitea Code Injection Vulnerability Exploited in Attacks

The Cybersecurity and Infrastructure Security Agency has added a newly disclosed Gitea vulnerability to its Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. The flaw, tracked as CVE-2026-60004, affects Gitea, a widely used self-hosted Git service popular among developers and enterprises that manage source code repositories. The security issue is classified as a […] The post CISA Warns of Gitea Code Injection Vulnerability Exploited in Attacks appeared first on Cyber Security News.