Gitea Flaw Left 30,000 Deployments' Private Container Images Readable for 4 Years
Source: Techtimes
Published:
<p>A critical vulnerability in Gitea , the widely used open-source self-hosted Git platform, silently allowed any person on the internet to pull private container images from affected instances — no account, no password, and no credentials of any kind required. The flaw, now tracked as CVE-2026-2777