CVE-2026-58434

Gitea CVE-2026-58434 affects private repository metadata exposure after access revocation via the authenticated endpoints GET /api/v1/user/starred and GET /api/v1/user/subscriptions. The issue allows previously authorized users to continue receiving repository metadata (e.g., full_name, descripti...

CVE-2026-58434

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:40+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-j2w3-9c3r-g83q...