The Gitea maintainers take security seriously.
If you discover a security issue, please bring it to their attention right away!

Please DO NOT file a public issue, instead send your report privately to security@gitea.io.

Security reports are greatly appreciated and we will publicly thank you for it, although we keep your name confidential if you request it.