Multiple user accounts issue in Gitea

Suddenly, we discovered many user accounts in our Gitea. How did this happen? What steps should I take?

Suddenly, we discovered many user accounts in our Gitea. How did this happen? What steps should I take?

Is the instance public? Is registration open? I would disable registration.