CVE-2026-129525

The Gitea platform is affected by a vulnerability where certain API endpoints and web pages failed to verify whether an addressed item was an issue or a pull request. This allowed users with permission to read issues but not pull requests (or vice versa) to access pull request data via issue sub-...