CVE-2026-58440

CVE-2026-58440 (Gitea) : The issue stems from incomplete revocation cleanup. When a collaborator with admin rights revokes repo access, the function DeleteCollaboration() cleans collaboration records, recalculates permissions, and stops watches, but it does not remove or disable webhooks created ...