Skip to content
securitytabs

Gitea security advisory (AV26-845) - Update 1

Serial Number: AV26-845 Date: August 25, 2026 Updated: October 20, 2026 As of August 14, 2026, Gitea is affected by vulnerabilities in the following product: Gitea Prior to 1.27.1 Update 1 Open-source reporting indicates that CVE-2026-20896 is being exploited in the wild.

Summary from Canadian Centre for Cyber Security.

Explained

The technology and terms in this story. Learn more

Why it was possible

The weaknesses behind this story's CVEs, from each CVE Record.

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

More in Vulnerabilities