CVE-2026-95112

Published: Oct 6, 2026Modified: Oct 13, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

When processing issue and comment bodies, Gitea scanned the entire preceding text for action keywords such as "closes" or "fixes" once per Markdown link, giving processing time quadratic in the input size. An authenticated user able to submit issue or comment content could send a crafted body of about 1 MB that keeps a CPU core busy for several minutes while holding a database transaction open.

Affected (1)

Products: Gitea: Gitea

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gitea Gitea	version < 28.0.0

Related CWEs

Inefficient Algorithmic Complexity

An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

References (4)

https://blog.gitea.com/release-of-28.0.0/

Source: 88ee5874-cf24-4952-aea0-31affedb7ff2

Release Notes

https://github.com/go-gitea/gitea/pull/39396

Source: 88ee5874-cf24-4952-aea0-31affedb7ff2

Patch

https://github.com/go-gitea/gitea/releases/tag/v28.0.0

Source: 88ee5874-cf24-4952-aea0-31affedb7ff2

Release Notes

https://github.com/go-gitea/gitea/security/advisories/GHSA-467c-4w7p-8427

Source: 88ee5874-cf24-4952-aea0-31affedb7ff2

Vendor Advisory

Timeline

No history available yet.