CVE-2026-116474

In Gitea , a vulnerability exists where the GITEA_TOKEN used in Gitea Actions jobs authenticates as the gitea-actions system user. Because the /api/v1/user email and GPG key endpoints accepted this user, a job could register an email address and a GPG key without required confirmation. Consequent...