CVE-2026-57886 Cross-repository issue/comment attachment re-linking can expose private attachment content

Cross-repository issue/comment attachment re-linking can expose private attachment content...

CVE-2026-57886

The Git repository management system Gitea is vulnerable to a cross-repository issue where re-linking issue or comment attachments can expose private attachment content. The root cause lies in the UpdateIssueAttachments() function (in models/issues/issue_update.go) and the UpdateCommentAttachment...

GO-2026-6035 Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content in gitea.dev

Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content in gitea.dev...