6 matches found
CVE-2026-58443
Public-only repository tokens can update private PR head branches...
CVE-2026-58443 Public-only repository tokens can update private PR head branches
Public-only repository tokens can update private PR head branches...
CVE-2026-58443
CVE-2026-58443 (Gitea) : Public-only repository tokens can update private PR head branches via a public route. The root cause is that the update flow uses ordinary RBAC on the head repository (push/merge to the PR head) without reapplying the token’s public-only constraint to the private head rep...
CVE-2026-58443 Public-only repository tokens can update private PR head branches
Public-only repository tokens can update private PR head branches...
CVE-2026-58443 Public-only repository tokens can update private PR head branches
Public-only repository tokens can update private PR head branches...
CVE-2026-58443
creationtimestamp| type| source ---|---|--- 2026-07-20 15:02:39+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mr3ktbnp5p2w 2026-07-21 08:44:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mr5g64l3e72v 2026-07-21 08:54:05+00:00| seen|...