GO-2025-4261
and 5 other vulnerabilities
GO-2025-4261 : Gitea allows attackers to add attachments with forbidden file extensions in code.gitea.io/gitea
GO-2026-6041 : Gitea: Notification API leaks private issue metadata after access revocation in code.gitea.io/gitea
GO-2026-6056 : Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts in code.gitea.io/gitea
GO-2026-6075 : Gitea: SSRF via HTTP Redirect in Repository Migration in code.gitea.io/gitea
GO-2026-6077 : Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service in code.gitea.io/gitea
GO-2026-6080 : Gitea: Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag in go-gitea/gitea
Discover Packages
code.gitea.io/gitea
modules
git
internal
package
Version:
v1.26.3
Opens a new window with list of versions in this module.
Published: Jun 20, 2026
License: MIT
Opens a new window with license information.
Imports: 0
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
CmdArg represents a command argument for git command, and it will be used for the git command directly without any further processing.
In most cases, you should use the "AddXxx" functions to add arguments, but not use this type directly.
Casting a risky (user-provided) string to CmdArg would cause security issues if it's injected with a "--xxx" argument.
¶
Click to show internal directories.
Click to hide internal directories.
Affected by 
Documentation
¶
Source Files