CVE-2026-58437

CVE-2026-58437 covers a vulnerability in Gitea where git push options repo.private and repo.template can change a repository’s visibility without proper audit/notifications. Publicly available details show the push-options handling in routers/private/hook_post_receive.go can set is_private and is...