{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:33.095Z","products":["gitea"],"actNowTotal":1,"results":[{"query":"gitea","matched":1,"actNow":1,"events":[{"id":"kev-2026-08-25-gitea-gitea","url":"https://securitythreatpulse.com/events/kev-2026-08-25-gitea-gitea","title":"Gitea: attackers can run their own code","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 59 days old, so current versions are being attacked. Ready-made attack tools are public. The severity score is critical (9.8).","tier":null,"rankScore":null,"rankWhy":null,"rulesVersion":"v2","ladder":{"talk":"reported","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-60004"],"vendor":"Gitea","product":"Gitea","affectedProducts":[{"vendorKey":"gitea","productKey":"gitea","vendor":"Gitea","product":"Gitea","slug":"gitea/gitea","kind":"direct","evidence":["kev"]}],"category":{"id":"developer","label":"Developer tools","why":"It holds source code and the keys used to build and ship software.","doThis":"Patch it. If it faced the internet, change the keys and passwords stored in it."},"summary":"Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea service account.","cvss":9.8,"epss":0.23988,"exploitMaturity":"weaponized","kevListed":true,"kevDateAdded":"2026-08-25","kevDueDate":"2026-08-28","firstSeenAt":"2026-08-25T00:00:00.000Z","updatedAt":"2026-10-24T23:23:22.790Z","newestEvidenceAt":"2026-10-24T23:23:07.997Z"}]}]}