CVE-2026-58440

🗓️ 21 Jul 2026 20:11:36Reported by candidateType

cve👁 7 Views

Linked connected advisory GHSA-66M4-5JJR-2RG5 details a Gitea vulnerability where webhooks created by a collaborator keep firing after access is revoked, enabling ongoing real-time exfiltration of private content. The issue affects Gitea’s collabo...

Reporter	Title	Published	Views	Family All 4
Github Security Blog	Gitea: Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content	21 Jul 202620:11	–	github
GitLab Advisory Database	Gitea: Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content	21 Jul 202600:00	–	gitlab
OSV	GHSA-66M4-5JJR-2RG5 Gitea: Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content	21 Jul 202620:11	–	osv
Positive Technologies	PT-2026-63306	21 Jul 202600:00	–	ptsecurity

Source	Link
github	www.github.com/advisories/GHSA-66m4-5jjr-2rg5
github	www.github.com/go-gitea/gitea
github	www.github.com/go-gitea/gitea/commit/de4b8277e9cb576f2315fb03b5ab6478b42a1d31
github	www.github.com/go-gitea/gitea/commit/f69e15afe7496cc62e96dab244629c69eb31a7bf
github	www.github.com/go-gitea/gitea/pull/38406
github	www.github.com/go-gitea/gitea/pull/38426
github	www.github.com/go-gitea/gitea/releases/tag/v1.27.0
github	www.github.com/go-gitea/gitea/security/advisories/GHSA-66m4-5jjr-2rg5
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-58440
osv	www.osv.dev/vulnerability/GHSA-66m4-5jjr-2rg5

21 Jul 2026 20:11Current