CVE-2026-109844

The Gitea platform is vulnerable to an information disclosure flaw via the GET /api/v1/user/subscriptions endpoint. The application fails to verify if a user retains access to a watched repository after their permissions are revoked, such as through a team permission downgrade. Consequently, an u...