CVE-2026-113429 | Gitea up to 28.2.x Artifact Upload Content-Encoding cross site scripting

November 1, 2026 Yanac

A vulnerability marked as problematic has been reported in Gitea up to 28.2.x. Impacted is an unknown function of the component Artifact Upload. This manipulation of the argument Content-Encoding causes cross site scripting.

This vulnerability appears as CVE-2026-113429. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More