Gitea Vulnerability Exposes Private Container Images without Authentication

Cybersecurity researchers have disclosed a security flaw in Gitea an opensource selfhosted platform for version control that allows unauthenticated remote attackers to pull private container images from Gitea deployments without requiring an account password or other credentials The vulnerability tracked as CVE202627771 CVSS score 82 affects all versions of Gitea prior to 1262