CVE-2026-97626

In Gitea , a vulnerability exists where requesting a user or organization profile page (GET /{username}) with specific Accept headers (application/rss+xml or application/atom+xml) bypasses visibility checks. This allows anonymous users , restricted users , and non-members to confirm the existence...