{"metadata": {"vulnerability": "CVE-2026-60021", "count": 10, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-07-08T09:19:08.741Z", "date_only": false, "value": "2026-07-08T09:19:08.741Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-60021", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T14:28:46.424Z", "date_only": false, "value": "2026-10-14T14:28:46.424Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-60021", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T14:28:46.424Z", "date_only": false, "value": "2026-10-14T14:28:46.424Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Gitea", "record": "CVE-2026-60021", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:17:21.120Z", "date_only": false, "value": "2026-10-14T15:17:21.120", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-60021", "record": "FKIE_CVE-2026-60021", "field": "published"}, {"timestamp": "2026-10-14T19:53:38.007Z", "date_only": false, "value": "2026-10-14T19:53:38.007940Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441011152336575", "record": "CVE-2026-60021", "field": "creation_timestamp", "uuid": "022bb933-8f98-425b-a6b6-900c4c45d92f", "content": "CVE-2026-60021 Gitea GitLab migration denial of service Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request continues after task cancellation and can exhaust the migration worker pool, preventing other migrations from progressing.\nhttps://www.cve.org/CVERecord?id=CVE-2026-60021https://github.com/go-gitea/gitea/security/advisories/GHSA-5952-x23q-p23fhttps://blog.gitea.com/release-of-1.27.3/https://github.com/go-gitea/gitea/pull/39023https://github.com/go-gitea/gitea/pull/39035https://github.com/go-gitea/gitea/releases/tag/v1.27.3#gitea #Gitea#CVE_2026_60021#bot", "url": "https://infosec.exchange/users/cve/statuses/117441011152336575"}, {"timestamp": "2026-10-18T13:30:24.038Z", "date_only": false, "value": "2026-10-18T13:30:24.038745Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-60021", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-18T13:30:24.038Z", "date_only": false, "value": "2026-10-18T13:30:24.038745Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-60021", "record": "FKIE_CVE-2026-60021", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-18T13:31:27.676Z", "date_only": false, "value": "2026-10-18T13:31:27.676Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-60021", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-18T13:31:27.676Z", "date_only": false, "value": "2026-10-18T13:31:27.676Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-60021", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-18T14:16:55.100Z", "date_only": false, "value": "2026-10-18T14:16:55.100", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-60021", "record": "FKIE_CVE-2026-60021", "field": "lastModified"}]}