Question 1

What is CVE-2026-28705 — CVE-2026-28705?

Accepted Answer

Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths.

Question 2

What is the authoritative source for CVE-2026-28705?

Accepted Answer

CVE-2026-28705 (CVE-2026-28705) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-28705CVE-2026-28705

Description

Scoring