6 matches found
CVE-2026-58443
Public-only repository tokens can update private PR head branches...
CVE-2026-58443 Public-only repository tokens can update private PR head branches
Public-only repository tokens can update private PR head branches...
CVE-2026-58443 Public-only repository tokens can update private PR head branches
Public-only repository tokens can update private PR head branches...
CVE-2026-58443
The Gitea repository management system is vulnerable to an authorization and token scope bypass where public-only repository tokens can be used to update private PR head branches . This issue impacts the application's access control mechanisms. Remediation is available in Gitea version 1.27.0 , w...
CVE-2026-58443 Public-only repository tokens can update private PR head branches
Public-only repository tokens can update private PR head branches...
CVE-2026-58443
creationtimestamp| type| source ---|---|--- 2026-07-20 15:02:39+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mr3ktbnp5p2w 2026-07-21 08:44:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mr5g64l3e72v 2026-07-21 08:54:05+00:00| seen|...