Gitea's SSH key lookup was case-insensitive - a crafted RSA key could match another user's key. https://intel.threadlinqs.com/threat/TL-2026-3046 #ThreatIntel #CVE_2026_103059 #CVE_2026_70357 #Gitea