
Software
your newest Gitea contributor might already have a shell on your server
A patch, a diff, and a Git hook was all it took — no admin access required, and Gitea's own advisory shipped with working exploit code attached.
Priya Nair · 3h ago · 6 min