CVE-2026-58417

Gitea is associated with CVE-2026-58417, where the REST API endpoint /orgs/{org}/public_members/{username} leaks private-organization membership information to unauthorized users. The cited advisories and sources (GHSA-jr5x-6h83-wrxf, related NVD entry, and OSV entries) describe the impact as dis...