Gitea · Gitea · CVE-2026-58508
**Name of the Vulnerable Software and Affected Versions**
Gitea (affected versions not specified)
**Description**
Two Server-Side Request Forgery (SSRF) issues exist in the migration and mirror functions. These involve DNS rebinding and a lack of re-validation, which could allow an attacker to induce the server to make unauthorized requests to internal resources.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.