CVE-2026-58431

The CVE-2026-58431 issue concerns Gitea's public-only API token restriction not being enforced on team API routes. Technical details across connected sources show: the vulnerability affects Gitea’s API surfaces under /api/v1/teams/{id}, where a public-only token can reveal private team repository...