3 matches found
CVE-2026-58431
Public-only API token restriction is not enforced on team API routes...
4.3CVSS0.00331EPSS
SaveExploits0References3
CVE-2026-58431
The Gitea application (specifically version 1.26.2 and nightly builds) contains a vulnerability where public-only API token restrictions are not properly enforced on team API routes. The root cause is that the /api/v1/teams/{teamid} route group fails to load ctx.Org.Organization, causing the chec...
5.7AI score0.00331EPSS
SaveExploits0References3
20