I have a correction for CVE-2026-20896 (Gitea trusted-proxies / X-WEBAUTH-USER) was not part of this dump.
It was reported by @rz1027 (me) as in Gitea's coordinated 1.26.3 security release, credited in the release notes. The exploitarium's actual Gitea PoC is a different bug (act_runner container-options escape).
It was reported by @rz1027 (me) as in Gitea's coordinated 1.26.3 security release, credited in the release notes. The exploitarium's actual Gitea PoC is a different bug (act_runner container-options escape).
Refs: [https://blog.gitea.com/release-of-1.26.3-and-1.26.4/] [https://github.com/go-gitea/gitea/security/advisories/GHSA-f... ] [https://hivesecurity.gitlab.io/blog/gitea-forgejo-nine-cves-...].