Gitea diffpatch RCE exposes thousands of servers

CVE-2026-60004 lets Gitea repo writers abuse diffpatch to plant Git hooks and run commands as the service account. With thousands of exposed instances still vulnerable, upgrade to 1.27.1 and reduce internet-facing/write-access exposure.