CISA confirms active exploitation of critical Gitea code injection vulnerability

Threat actors are actively exploiting a critical-severity vulnerability in self-hosted Gitea instances to perform unauthorized code injection. CISA has added the flaw to its Known Exploited Vulnerabilities catalog, signaling an urgent need for patching to prevent potential remote code execution.