EUVD-2026-58161

Private Repository Metadata Remains Accessible After Access Revocation...

CVE-2026-58433

The Git repository management system Gitea contains a vulnerability in its team-repository linking endpoint . This flaw allows an attacker to bypass the RepoAdminChangeTeamAccess organization setting, which is designed to restrict repository administrators from modifying team access. Exploiting t...

CVE-2026-58433 Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting

Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...

EUVD-2026-58160

Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...

CVE-2026-58433 Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting

Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...

CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

EUVD-2026-58151

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

CVE-2026-57894 Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration

Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration...

CVE-2026-57897

A flaw in Gitea allows for cross-repository information disclosure through the use of Org-Level Actions Run/Job APIs . An attacker could exploit this vulnerability to gain unauthorized access to sensitive information across different repositories. To mitigate this risk, you can globally disable G...

CVE-2026-57897 Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs

Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs...

CVE-2026-57894

The Gitea repository management tool is vulnerable to Server-Side Request Forgery (SSRF) via the Clone() function in modules/git/repo.go. The issue arises because the software follows Git HTTP redirects even after initial URL allow/block validation, which can lead to internal git repository exfil...

CVE-2026-57886 Cross-repository issue/comment attachment re-linking can expose private attachment content

Cross-repository issue/comment attachment re-linking can expose private attachment content...

EUVD-2026-58147

Cross-repository issue/comment attachment re-linking can expose private attachment content...

CVE-2026-57886

The Git repository management system Gitea is vulnerable to a cross-repository issue where re-linking issue or comment attachments can expose private attachment content. The root cause lies in the UpdateIssueAttachments() function (in models/issues/issue_update.go) and the UpdateCommentAttachment...

CVE-2026-57886 Cross-repository issue/comment attachment re-linking can expose private attachment content

Cross-repository issue/comment attachment re-linking can expose private attachment content...

CVE-2026-57886 Cross-repository issue/comment attachment re-linking can expose private attachment content

Cross-repository issue/comment attachment re-linking can expose private attachment content...

CVE-2026-56443

The Git repository management system Gitea is affected by a token public-only scope bypass vulnerability. This issue occurs on Limited-visibility owners (specifically involving Repository and Package categories) and is a residual issue from CVE-2026-25714. The root cause involves access control d...

CVE-2026-56443 Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118

Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...