Hackers now exploit critical Gitea flaw in code injection attacks

Attackers are now exploiting a critical-severity vulnerability in the Gitea self-hosted Git service, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The agency has not yet disclosed specific details about the vulnerability or the extent of the exploitation, but the advisory highlights active attacks.