Live › vulnerability › CVE-2026-113429
Legacy Gitea Actions artifact uploads (v1 to v3) stored the request's Content-Encoding header unchecked as the served Content-Type, and a video/ or audio/ value also removed the sandboxing Content-Security-Policy. An attacker who can run an Actions job can make a browser execute script on the Gitea origin with a victim's session, which for an administrator means control of the instance.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-01 10:49 UTC. All times on this page are UTC.
Gitea instances that run Actions and hold artifacts uploaded through the legacy v1 to v3 artifact upload path are exposed. Artifact download URLs on public repositories are reachable without logging in, so those repositories widen the exposure. Instances with Actions disabled or with no legacy-era artifacts have less to look at.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| gitea | vendor | < 28.3.0 | 28.3.0 |
gitea --version); anything below 28.3.0 is affected if Actions is enabledUpgrade Gitea to 28.3.0 or later
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Legacy (v1 to v3) Actions artifact uploads stored the request's Content-Encoding header unchecked in the column that is served as the artifact's Content-Type on download, and a value starting with video/ or audio/ also removed the sandboxing Content-Security-Policy. A user who can run an Actions job could upload an artifact that a browser renders as HTML on the Gitea origin when the direct artifact download URL is opened, and the URL is reachable anonymously on public repositories. A victim who opens the link runs the attacker's script with their own session, which for an administrator means control of the instance. Legacy uploads now store only the gzip marker, and the special serve headers are chosen only for valid media types.
This page as .md · .json · in your agent: get_signal("CVE-2026-113429")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.