CVE-2026-123065 | Gitea up to 28.3.x Attachment path traversal

November 15, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Gitea up to 28.3.x. This affects an unknown function of the component Attachment. The manipulation results in path traversal.

This vulnerability is cataloged as CVE-2026-123065. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More