GO-2026-6041 Gitea: Notification API leaks private issue metadata after access revocation in code.gitea.io/gitea

Gitea: Notification API leaks private issue metadata after access revocation in code.gitea.io/gitea...

GO-2026-6017 Gitea has insufficient permission checks for Composer package source links in code.gitea.io/gitea

Gitea has insufficient permission checks for Composer package source links in code.gitea.io/gitea...

GO-2026-5448 Gitea: Open Redirect via redirect_to in code.gitea.io/gitea

Gitea: Open Redirect via redirectto in code.gitea.io/gitea...

GO-2026-5091 Gitea has insecure default SSH settings in code.gitea.io/gitea

Gitea has insecure default SSH settings in code.gitea.io/gitea...

GO-2026-4362 Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea

Gitea improperly exposes issue and pull request titles in code.gitea.io/gitea...

GO-2025-4258 Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea

Gitea mishandles authorization for deletion of releases in code.gitea.io/gitea...

GO-2025-4265 Gitea vulnerable to Cross-site Scripting in code.gitea.io/gitea

Gitea vulnerable to Cross-site Scripting in code.gitea.io/gitea...