Gitea RCE CVE-2026-60004: Critical Vulnerability Actively Exploited
Gitea RCE CVE-2026-60004 (CVSS 9.8) is actively exploited. Attackers can execute shell commands via the diffpatch endpoint.
Archive
/blog/en
In-depth tutorials and notes on software engineering, AI, and self-hosting — written from hands-on experience building and running production systems.
Gitea RCE CVE-2026-60004 (CVSS 9.8) is actively exploited. Attackers can execute shell commands via the diffpatch endpoint.
Plane is an open-source project management platform alternative to Jira, Linear, Monday, and ClickUp. Self-hosted and free.
A supply chain attack targeted popular crates on crates.io including arrayref, append-only-vec, and internment.
Next.js 16.3 released with major features: Instant Navigations, 90% less memory, 5.5x faster builds, and TypeScript 7 support.
JsonViewer is a web app for interactive JSON data visualization and exploration. Built with React and React Flow.
CI/CD pipeline tutorial using GitHub Actions from scratch.
Complete Docker guide for PHP/Laravel developers from scratch.
RustFS is an S3-compatible object storage that's 2.3x faster than MinIO. Built with Rust for maximum performance.
Coolify is an open-source, self-hostable PaaS alternative to Vercel, Heroku, and Netlify. Deploy apps and databases easily on your own servers.
DSTSSE is a desktop save editor for Digimon Story: Time Stranger built with Rust, Tauri 2, and React 19.