Gitea 28.3 Released with 20 Security Fixes, Performance

Gitea, the self-hosted Git service and software development platform, has released version 28.3, the third maintenance update in the 28.x series, addressing many security vulnerabilities. Many of them involve weak enforcement of access token permissions, potentially allowing restricted tokens to access private repository information or perform operations beyond their scope. Among the more serious fixes is CVE-2026-120263, an OAuth2 account takeover vulnerability affecting installations with automatic account linking and open registration. Under these conditions, an attacker could link an exter

https://linuxiac.com/gitea-28-3-released-with-20-security-fixes-performance-improvements/

Image: