cbcvebase.
CVE-2026-59763
published 2026-08-13

CVE-2026-59763: Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

PriorityP419medium4.3CVSS 3.1
AVNACLPRLUINSUCNINAL
EPSS
0.24%
14.6th percentile
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

Affected

2 ranges
VendorProductVersion rangeFixed in
code.gitea.iogitea>= 0 < 1.27.01.27.0
giteagitea_open_source_git_server<= 1.26.4
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.