Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, including administrators. [...]
Hackers exploit critical auth bypass in Gitea Docker image
Summary + source link. No paywalls, no tracking.