CVE Catalog
CVE-2026-59763
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads.
Risk Assessment
An attacker can send a specially crafted package, leading to excessive server resource consumption and potential denial of service.
Recommendation
Apply limits on the size and number of package metadata and update Gitea to a patched version.
Original NVD description (English source)
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads