You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim
Low severity
GitHub Reviewed
Published
Jul 13, 2026
in
go-gitea/gitea
•
Updated Jul 21, 2026