Hackers exploit critical auth bypass in Gitea Docker image

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service ...
Tech Times

Gitea Docker Flaw Now Actively Probed: One Header Grants Admin Access to Source Code

Sysdig detected attackers probing the CVSS 9.8 authentication bypass 13 days after the advisory, using one HTTP header to ...
Hosted on MSN

A Gitea container flaw just surfaced that lets anyone on the internet pull private container images — more than 30,000 deployments have been exposed for almost four years

If you run a Gitea instance with the built-in container registry turned on, there is a good chance your private images have been accessible to anyone with a web browser and a cURL command. A recently ...