CVE-2026-58445

CVE-2026-58445 is a Gitea vulnerability described as a cross-repository label-ID enumeration oracle via the unscoped DeleteIssueLabel API. Affected: through version 1.26.3 (no patch yet). The endpoint DELETE /repos/{owner}/{repo}/issues/{index}/labels/{id} loads the label by ID globally (no repo/...