CVE-2026-58445

CVE-2026-58445 corresponds to a Gitea vulnerability: the unscoped DeleteIssueLabel API loads a label by global ID without verifying repository/org scope, enabling a cross-repository label-ID existence/enumeration oracle. This can reveal whether arbitrary label IDs exist across the instance (inclu...

A Bootiful Podcast: API oracle Arjen Poutsma

Hi, Spring fans! In this edition, I had the pleasure of chatting with the brilliant Arjen Poutsma, our go-to API oracle. If you’re curious about his fantastic insights, thoughts, and consultancy services, be sure to check out poutsma-principles.com...