CVE-2026-58431

Public-only API token restriction is not enforced on team API routes...

CVE-2026-58431

The Gitea application (specifically version 1.26.2 and nightly builds) contains a vulnerability where public-only API token restrictions are not properly enforced on team API routes. The root cause is that the /api/v1/teams/{teamid} route group fails to load ctx.Org.Organization, causing the chec...

SUSE CVE-2026-58431

Public-only API token restriction is not enforced on team API routes...

CVE-2026-58431

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:11+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-h56g-4qw7-2mxg...