CVE-2026-58445

Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API...

CVE-2026-58445

The Gitea application is vulnerable to a cross-repository label-ID enumeration oracle . This issue is caused by the unscoped DeleteIssueLabel API , which allows an attacker to enumerate label IDs across different repositories. The vulnerability is addressed in Gitea version 1.27.0 . No specific e...