CVE-2026-58439

CVE-2026-58439 concerns Gitea’s branch protection: when a PR’s target branch is changed, the existing official approval flag is not re-evaluated, allowing a non-whitelisted user’s approval to satisfy protected-branch policies after retargeting. Affected component is pull-request review handling i...