CVE-2026-73130

Name of the Vulnerable Software and Affected Versions Gitea (affected versions not specified)

Description Lack of length limitation on the gitignores field in repository-creation forms and the API allows an attacker to submit an oversized value. During repository initialization, the system splits this field into template names, repeatedly reads the referenced templates, and buffers their contents in memory. This process can be exploited to amplify template reads and memory consumption, leading to a denial of service that impairs system availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.